CVE-2014-0008
EUVD-2014-011220.01.2014, 15:14
lib/adminlib.php in Moodle through 2.3.11, 2.4.x before 2.4.8, 2.5.x before 2.5.4, and 2.6.x before 2.6.1 logs cleartext passwords, which allows remote authenticated administrators to obtain sensitive information by reading the Config Changes Report.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| moodle | moodle | 2.5.0 |
| moodle | moodle | 2.5.1 |
| moodle | moodle | 2.5.2 |
| moodle | moodle | 2.5.3 |
| moodle | moodle | 2.6.0 |
| moodle | moodle | 2.4.0 |
| moodle | moodle | 2.4.1 |
| moodle | moodle | 2.4.2 |
| moodle | moodle | 2.4.3 |
| moodle | moodle | 2.4.4 |
| moodle | moodle | 2.4.5 |
| moodle | moodle | 2.4.6 |
| moodle | moodle | 2.4.7 |
| moodle | moodle | 𝑥 ≤ 2.3.11 |
| moodle | moodle | 2.3.0 |
| moodle | moodle | 2.3.1 |
| moodle | moodle | 2.3.2 |
| moodle | moodle | 2.3.3 |
| moodle | moodle | 2.3.4 |
| moodle | moodle | 2.3.5 |
| moodle | moodle | 2.3.6 |
| moodle | moodle | 2.3.7 |
| moodle | moodle | 2.3.8 |
| moodle | moodle | 2.3.9 |
| moodle | moodle | 2.3.10 |
𝑥
= Vulnerable software versions
Ubuntu Releases
Common Weakness Enumeration
References