PT-2018-9883 · Moodle · Moodle

Chirine Nassar

·

CVE-2018-1044

·

Published

2018-01-22

·

Updated

2024-09-11

CVSS v3.1

4.3

Medium

VectorAV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions: Moodle versions 3.x
Description: The issue allows students to view quiz results even when it is prohibited in the settings, due to a flaw in quiz web services.
Recommendations: For Moodle versions 3.x, update the quiz web services configuration to properly enforce the settings that prohibit students from seeing quiz results.

Fix

Information Disclosure

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2018-1044
GHSA-332G-XH34-5C96

Affected Products

Moodle