NVD

Id
28965  
Name
CVE-2014-0008  
Description
lib/adminlib.php in Moodle through 2.3.11, 2.4.x before 2.4.8, 2.5.x before 2.5.4, and 2.6.x before 2.6.1 logs cleartext passwords, which allows remote authenticated administrators to obtain sensitive information by reading the Config Changes Report.  
Reject
 
CVSS Version
2  
CVSS Score
4  
Severity
Medium  
CVSS Base Score
4  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2014-01-20  
Modified Date
2014-02-21  
Seq
2014-0008  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
152680 28965 CVE-2014-0008 http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-36721  View
152681 28965 CVE-2014-0008 FEDORA-2014-1377  View
152682 28965 CVE-2014-0008 FEDORA-2014-1396  View
152683 28965 CVE-2014-0008 [oss-security] 20140120 Moodle security notifications public  View
152684 28965 CVE-2014-0008 1029647  View
152685 28965 CVE-2014-0008 https://moodle.org/mod/forum/discuss.php?d=252414  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
12348 JVNDB-2014-001223 Moodle の lib/adminlib.php における重要な情報を取得される脆弱性 Moodle の lib/adminlib.php は、平文のパスワードを記録するため、重要な情報を取得される脆弱性が存在します。 CVE-2014-0008 67409 CVE-2014-0008 28965 4 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-001223.html 2014-01-20 2014-01-23 View