Detections
Analytics
Moodle 2.4.x < 2.4.5 / 2.5.x < 2.5.1 Multiple Vulnerabilities
medium Nessus Network Monitor Plugin ID 9417
Synopsis
The remote web server is hosting a web application that is vulnerable to multiple attack vectors.Description
The remote web server hosts Moodle, an open-source course management system. Versions of Moodle 2.4.x prior to 2.4.5 or 2.5.x prior to 2.5.1 are exposed to the following vulnerabilities :- A flaw exists in 'mod/chat/gui_sockets/index.php' that is due to the program failing to properly check for access. This may allow a remote attacker to access a daemon-mode Chat activity without proper permissions. (CVE-2013-2242)
- A flaw exists that may lead to the unauthorized disclosure of sensitive information. The issue is due to the program failing to properly restrict users using view source on pages. This may allow a remote attacker to gain access to answer information by obtaining ID values for Lesson activity matching questions. (CVE-2013-2243)
- A flaw exists that allows a remote cross-site scripting (XSS) attack. This flaw exists because the application does not validate input passed via the Conditional Activities 'user' field before returning it to the user. This may allow an attacker to create a specially crafted request that would execute arbitrary script code in a user's browser within the trust relationship between their browser and the server. (CVE-2013-2244)
- A flaw exists that may lead to the unauthorized disclosure of sensitive information. The issue is due to block information related to the person being impersonated being shown shown along with an error message when an attacker is attempting to impersonate another user using RSS tokens. This may allow a remote attacker to gain access to sensitive information. (CVE-2013-2245)
- A flaw exists that may lead to the unauthorized disclosure of sensitive information. The issue is due to the feedback module failing to properly check for privileges in 'feedback/lib.php'. This will result in personal information being exposed to a remote attacker. (CVE-2013-2246)
- A flaw exists in the IMS-LTI (External tool) module that may lead to the unauthorized disclosure of sensitive information. The issue is due to the program not allowing users to change privacy settings, which will result in personal information always being transferred. This may allow a remote attacker to gain access to sensitive information. (CVE-2013-4938)
Solution
Upgrade to Moodle version 2.5.1 or later. If version 2.5.1 cannot be obtained, version 2.4.5 has also been patched for these issues.See Also
Plugin Details
Severity: Medium
ID: 9417
Family: CGI
Published: 7/21/2016
Updated: 3/6/2019
Risk Information
VPR
Risk Factor: Low
Score: 3.0
CVSS v2
Risk Factor: Medium
Base Score: 5
Temporal Score: 4.4
Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N
CVSS v3
Risk Factor: Medium
Base Score: 5.3
Temporal Score: 5.1
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Temporal Vector: CVSS:3.0/E:X/RL:O/RC:C
Vulnerability Information
CPE: cpe:/a:moodle:moodle
Patch Publication Date: 7/15/2013
Vulnerability Publication Date: 7/15/2013
Reference Information
CVE: CVE-2013-2242, CVE-2013-2243, CVE-2013-2244, CVE-2013-2245, CVE-2013-2246, CVE-2013-4938