Staging Environment: Content and features may be unstable or change without notice.
Advisory details: github_osv / GHSA-pgp5-rcwp-qvfg
Advisory ID github_osv/GHSA-pgp5-rcwp-qvfg
Aliases CVE-2013-1832
Summary Moodle includes the WebDAV password in the configuration form repository/webdav/lib.php in Moodle 2.x through 2.1.10, 2.2.x before 2.2.8, 2.3.x before 2.3.5, and 2.4.x before 2.4.2 includes the WebDAV password in the configuration form, which allows remote authenticated administrators to obtain sensitive information by configuring an instance.
Status Published
Exploitability 0.5
Weighted Severity 0.0
Risk
Affected and Fixed Packages Package Details
Introduced and Fixed Package Commit Patches Package Commit Patches Details
Weaknesses (1)
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
System Score Found at
generic_textual MODERATE
Reference id Reference type URL
http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-37681
http://lists.fedoraproject.org/pipermail/package-announce/2013-April/101310.html
http://lists.fedoraproject.org/pipermail/package-announce/2013-April/101358.html
http://openwall.com/lists/oss-security/2013/03/25/2
https://github.com/moodle/moodle
https://github.com/moodle/moodle/commit/0e94caf991d4e399726e5dc0769873d9f753a727
https://github.com/moodle/moodle/commit/46eec6e46b89a7e8e3f08e460d917f2d1a2959d8
https://github.com/moodle/moodle/commit/92e592385784ec7ea5b5328a0c3c1608d321ad32
https://github.com/moodle/moodle/commit/ce96f23fe15ce6addc2f56af015452c3ea406190
https://moodle.org/mod/forum/discuss.php?d=225343
CVE-2013-1832 https://nvd.nist.gov/vuln/detail/CVE-2013-1832
No exploits are available.

No EPSS data available for this advisory.

Patch URL
There are no known patches.
There are no known vectors.

There are no SSVC decisions available.