NVD

Id
40422  
Name
CVE-2013-4938  
Description
The LTI (aka IMS-LTI) mod_form implementation in Moodle through 2.1.10, 2.2.x before 2.2.11, 2.3.x before 2.3.8, 2.4.x before 2.4.5, and 2.5.x before 2.5.1 does not properly support the sendname, sendemailaddr, and acceptgrades settings, which allows remote attackers to obtain sensitive information in opportunistic circumstances by leveraging an environment in which there was an ineffective attempt to enable the more secure values.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-18  
Published
2013-07-29  
Modified Date
2013-07-29  
Seq
2013-4938  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
205267 40422 CVE-2013-4938 http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-40308  View
205268 40422 CVE-2013-4938 https://moodle.org/mod/forum/discuss.php?d=232497  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
21958 JVNDB-2013-003533 Moodle の LTI mod_form の実装における重要な情報を取得される脆弱性 Moodle の LTI (別名 IMS-LTI) mod_form の実装は、sendname、sendemailaddr、および acceptgrades の設定を適切にサポートしないため、重要な情報を取得される脆弱性が存在します。 CVE-2013-4938 64880 CVE-2013-4938 40422 4.3 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-003533.html 2013-07-15 2013-07-30 View