{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/40067?format=json","vulnerability_id":"VCID-mmg3-7fz9-5uak","summary":"Inclusion of Sensitive Information in Log Files\nA flaw was found in Moodle. No option exists to omit logs from data privacy exports, which may contain details of other users who interacted with the requester.","aliases":[{"alias":"CVE-2018-10889"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/56058?format=json","purl":"pkg:composer/moodle/moodle@3.3.7","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.3.7"},{"url":"http://public2.vulnerablecode.io/api/packages/56059?format=json","purl":"pkg:composer/moodle/moodle@3.4.4","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.4.4"},{"url":"http://public2.vulnerablecode.io/api/packages/56060?format=json","purl":"pkg:composer/moodle/moodle@3.5.1","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.5.1"}],"affected_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/53781?format=json","purl":"pkg:composer/moodle/moodle@3.3.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4rz2-b4e3-87g5"},{"vulnerability":"VCID-83kb-4mk9-t7ge"},{"vulnerability":"VCID-8mgr-gdzj-4ybs"},{"vulnerability":"VCID-9nd7-4wve-97hc"},{"vulnerability":"VCID-ajkr-fxa1-mkhk"},{"vulnerability":"VCID-b7br-bh2d-rygp"},{"vulnerability":"VCID-bjnq-q2nd-1khp"},{"vulnerability":"VCID-ckg1-9vpt-yfdk"},{"vulnerability":"VCID-duna-st9c-mqbk"},{"vulnerability":"VCID-fegs-ubsk-63hu"},{"vulnerability":"VCID-fygy-9njn-abgd"},{"vulnerability":"VCID-g8ct-c4ce-zuaf"},{"vulnerability":"VCID-m4zv-e3dn-budf"},{"vulnerability":"VCID-mmg3-7fz9-5uak"},{"vulnerability":"VCID-nc2j-pay7-ryab"},{"vulnerability":"VCID-p2gd-7uam-mqf8"},{"vulnerability":"VCID-q2fa-jymp-c3bb"},{"vulnerability":"VCID-vfp6-4h8n-bkax"},{"vulnerability":"VCID-wdfz-mheb-s3ak"},{"vulnerability":"VCID-x9vd-njdz-jua9"},{"vulnerability":"VCID-yghg-775s-vber"},{"vulnerability":"VCID-yp82-zj5g-pbaf"},{"vulnerability":"VCID-zgzm-wj81-jkah"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.3.0"},{"url":"http://public2.vulnerablecode.io/api/packages/54895?format=json","purl":"pkg:composer/moodle/moodle@3.4.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-336n-hpzg-euhd"},{"vulnerability":"VCID-4rz2-b4e3-87g5"},{"vulnerability":"VCID-8mgr-gdzj-4ybs"},{"vulnerability":"VCID-b7br-bh2d-rygp"},{"vulnerability":"VCID-bjnq-q2nd-1khp"},{"vulnerability":"VCID-ckg1-9vpt-yfdk"},{"vulnerability":"VCID-deur-8zdf-2kh2"},{"vulnerability":"VCID-duna-st9c-mqbk"},{"vulnerability":"VCID-fegs-ubsk-63hu"},{"vulnerability":"VCID-fygy-9njn-abgd"},{"vulnerability":"VCID-g8ct-c4ce-zuaf"},{"vulnerability":"VCID-k73h-z6j8-gkgz"},{"vulnerability":"VCID-m4zv-e3dn-budf"},{"vulnerability":"VCID-mmg3-7fz9-5uak"},{"vulnerability":"VCID-nc2j-pay7-ryab"},{"vulnerability":"VCID-p2gd-7uam-mqf8"},{"vulnerability":"VCID-qxsq-ku22-r7gx"},{"vulnerability":"VCID-r6kn-b963-eqge"},{"vulnerability":"VCID-s6uu-335k-yfbc"},{"vulnerability":"VCID-vfp6-4h8n-bkax"},{"vulnerability":"VCID-x9vd-njdz-jua9"},{"vulnerability":"VCID-yghg-775s-vber"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.4.0"},{"url":"http://public2.vulnerablecode.io/api/packages/56056?format=json","purl":"pkg:composer/moodle/moodle@3.5.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-336n-hpzg-euhd"},{"vulnerability":"VCID-4rz2-b4e3-87g5"},{"vulnerability":"VCID-8mgr-gdzj-4ybs"},{"vulnerability":"VCID-akv3-zfp8-kkc7"},{"vulnerability":"VCID-bjnq-q2nd-1khp"},{"vulnerability":"VCID-deur-8zdf-2kh2"},{"vulnerability":"VCID-k73h-z6j8-gkgz"},{"vulnerability":"VCID-mmg3-7fz9-5uak"},{"vulnerability":"VCID-qhv1-wgpm-7fh6"},{"vulnerability":"VCID-qxsq-ku22-r7gx"},{"vulnerability":"VCID-r6kn-b963-eqge"},{"vulnerability":"VCID-s6uu-335k-yfbc"},{"vulnerability":"VCID-vfp6-4h8n-bkax"},{"vulnerability":"VCID-x72x-7e66-yff3"},{"vulnerability":"VCID-x9vd-njdz-jua9"},{"vulnerability":"VCID-zjrq-np3y-hua5"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.5.0"}],"references":[{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10889","reference_id":"","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10889"},{"reference_url":"https://moodle.org/mod/forum/discuss.php?d=373369","reference_id":"","reference_type":"","scores":[],"url":"https://moodle.org/mod/forum/discuss.php?d=373369"},{"reference_url":"http://www.securityfocus.com/bid/104733","reference_id":"","reference_type":"","scores":[],"url":"http://www.securityfocus.com/bid/104733"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10889","reference_id":"CVE-2018-10889","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10889"}],"weaknesses":[{"cwe_id":1035,"name":"OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities","description":"Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017."},{"cwe_id":532,"name":"Insertion of Sensitive Information into Log File","description":"Information written to log files can be of a sensitive nature and give valuable guidance to an attacker or expose sensitive user information."},{"cwe_id":937,"name":"OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities","description":"Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013."}],"exploits":[],"severity_range_score":null,"exploitability":null,"weighted_severity":null,"risk_score":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-mmg3-7fz9-5uak"}