Test Kennung:	1.3.6.1.4.1.25623.1.1.10.2013.0217
Kategorie:	Mageia Linux Local Security Checks
Titel:	Mageia: Security Advisory (MGASA-2013-0217)
Zusammenfassung:	The remote host is missing an update for the 'moodle' package(s) announced via the MGASA-2013-0217 advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'moodle' package(s) announced via the MGASA-2013-0217 advisory. Vulnerability Insight: Flash files distributed with the YUI library in Moodle before 2.4.5 may have allowed for cross-site scripting attacks (MSA-13-0025). Privacy settings for the IMS-LTI (External tool) module in Moodle before 2.4.5 were not able to be changed so personal information was always transferred (MSA-13-0026). Users were able to access a daemon-mode Chat activity in Moodle before 2.4.5 without the required capability (CVE-2013-2242). It was possible to determine answers from ID values in Lesson activity matching questions in Moodle before 2.4.5 (CVE-2013-2243). Conditional access rule values for user fields were able to contain unescaped HTML/JS that would be output to users in Moodle before 2.4.5 (CVE-2013-2244). When impersonating another user using RSS tokens in Moodle before 2.4.5, an error was displayed, but block information relevant to the person being impersonated was shown (CVE-2013-2245). The Feedback module in Moodle before 2.4.5 was showing personal information to users without the needed capability (CVE-2013-2246). Affected Software/OS: 'moodle' package(s) on Mageia 3. Solution: Please install the updated package(s). CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2013-2242 Common Vulnerability Exposure (CVE) ID: CVE-2013-2243 Common Vulnerability Exposure (CVE) ID: CVE-2013-2244 Common Vulnerability Exposure (CVE) ID: CVE-2013-2245 Common Vulnerability Exposure (CVE) ID: CVE-2013-2246
Copyright	Copyright (C) 2022 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.