NVD

Id
51422  
Name
CVE-2009-4299  
Description
mod/glossary/showentry.php in the Glossary module for Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 does not properly perform access control, which allows attackers to read unauthorized Glossary entries via unknown vectors.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-07  
Published
2009-12-15  
Modified Date
2009-12-16  
Seq
2009-4299  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
260800 51422 CVE-2009-4299 http://docs.moodle.org/en/Moodle_1.8.11_release_notes  View
260801 51422 CVE-2009-4299 http://docs.moodle.org/en/Moodle_1.9.7_release_notes  View
260802 51422 CVE-2009-4299 http://moodle.org/mod/forum/discuss.php?d=139103  View
260803 51422 CVE-2009-4299 37244  View
260804 51422 CVE-2009-4299 ADV-2009-3455  View
260805 51422 CVE-2009-4299 FEDORA-2009-13040  View
260806 51422 CVE-2009-4299 FEDORA-2009-13065  View
260807 51422 CVE-2009-4299 FEDORA-2009-13080  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
44190 JVNDB-2009-005197 mod/glossary/showentry.php における不正に Glossary エントリを読み取られる脆弱性 Moodle 用の Glossary モジュールの mod/glossary/showentry.php は、アクセスコントロールを適切に実行しないため、不正に Glossary エントリを読み取られる脆弱性が存在します。 CVE-2009-4299 41730 CVE-2009-4299 51422 5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-005197.html 2009-12-02 2012-09-25 View