CVE-2018-10889 MEDIUM

CVE-2018-10889

Vendor [Unknown]

Product moodle

Weakness CWE-532 · Sensitive info in logs

Published July 10, 2018

Last update August 5, 2024

View on NVD All CVEs

CVSS base score

4.3/10

Attack vector Network

Attack complexity Low

Privileges required Low

User interaction None

Confidentiality Low

Integrity None

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

What the vulnerability does

01Description

A flaw was found in moodle before versions 3.5.1, 3.4.4, 3.3.7. No option existed to omit logs from data privacy exports, which may contain details of other users who interacted with the requester.

Key dates

02Disclosure timeline

July 10, 2018 CVE published

August 5, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2018-10889 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/532.html

Related vulnerabilities

Identifiers

CVE CVE-2018-10889

CWE CWE-532

CVSS 4.3 / MEDIUM

Affected versions

Vendor [Unknown]

Product moodle

Affected moodle 3.5.1

Vendor [Unknown]

Product moodle

Affected moodle 3.4.4

Vendor [Unknown]

Product moodle

Affected moodle 3.3.7

CVE-2018-10889

01Description

02Disclosure timeline

03References

04Related CVE