Skip to content
OpenAdvisories
Unscored CVE-2014-0008 EUVD-2014-0112GHSA-qqvp-r28f-c3cv

lib/adminlib.php in Moodle through 2.3.11, 2.4.x before 2.4.8, 2.5.x before 2.5.4, and 2.6.x before 2.6.1 logs cleartext passwords, which a…

Published Jan 20, 2014 · Updated Aug 6, 2024 · Assigned by redhat

Description

lib/adminlib.php in Moodle through 2.3.11, 2.4.x before 2.4.8, 2.5.x before 2.5.4, and 2.6.x before 2.6.1 logs cleartext passwords, which allows remote authenticated administrators to obtain sensitive information by reading the Config Changes Report.

References