moodle: many vulnerabilities [LWN.net]

Package(s):

moodle

CVE #(s):

CVE-2012-0792 CVE-2012-0793 CVE-2012-0794 CVE-2012-0795 CVE-2012-0796 CVE-2012-0797 CVE-2012-0798 CVE-2012-0799 CVE-2012-0800 CVE-2012-0801

Created:

February 2, 2012

Updated:

February 8, 2012

Description:

From the Red Hat bugzilla entry:

CVE-2012-0792 Moodle MSA-12-0002: Personal information leak

CVE-2012-0793 Moodle MSA-12-0004: Added profile image security

CVE-2012-0794 Moodle MSA-12-0005: Encryption enhancement

CVE-2012-0795 Moodle MSA-12-0006: Additional email address validation

CVE-2012-0796 Moodle MSA-12-0007: Email injection prevention

CVE-2012-0797 Moodle MSA-12-0008: Unsynchronised access via tokens

CVE-2012-0798 Moodle MSA-12-0009: Role access issue

CVE-2012-0799 Moodle MSA-12-0010: Unauthorised access to session key

CVE-2012-0800 Moodle MSA-12-0011: Browser autofill password issue

CVE-2012-0801 Moodle MSA-12-0012: Form validation issue

Alerts:

(Log in to post comments)