CVEvulnerability

CVE-2009-4299

5.0 MEDIUM Published 2009-12-16 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2009-12-16
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
Weaknesses
CWE-264

Description

mod/glossary/showentry.php in the Glossary module for Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 does not properly perform access control, which allows attackers to read unauthorized Glossary entries via unknown vectors.

Affected configurations

• moodle moodle 1.8.1 • moodle moodle 1.8.2 • moodle moodle 1.8.3 • moodle moodle 1.8.4 • moodle moodle 1.8.5 • moodle moodle 1.8.7 • moodle moodle 1.8.8 • moodle moodle 1.8.9 • moodle moodle 1.8.10 • moodle moodle 1.9.1 • moodle moodle 1.9.2 • moodle moodle 1.9.3 • moodle moodle 1.9.4 • moodle moodle 1.9.5 • moodle moodle 1.9.6

Related

Weakness · not in database (1)

References