FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

moodle -- multiple vulnerabilities

Affected packages
	moodle29	<	2.9.9
	moodle30	<	3.0.7
	moodle31	<	3.1.3

Details

VuXML ID	f6565fbf-ab9e-11e6-ae1b-002590263bf5
Discovery	2016-11-14
Entry	2016-11-16
Modified	2016-11-27

Marina Glancy reports:

MSA-16-0023: Question engine allows access to files that should not be available

MSA-16-0024: Non-admin site managers may accidentally edit admins via web services

MSA-16-0025: Capability to view course notes is checked in the wrong context

MSA-16-0026: When debugging is enabled, error exceptions returned from webservices could contain private data

[source]

References

CVE Name	CVE-2016-8642
CVE Name	CVE-2016-8643
CVE Name	CVE-2016-8644
URL	https://moodle.org/security/