CVE-2012-1169

MediumCVSS 5.3/10Last modified Jun 16, 2026

Description

Moodle before 2.2.2 has Personal information disclosure, when administrative setting users name display is set to first name only full names are shown in page breadcrumbs.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-200

Affected software

Vendor	Product	Versions
Moodle	Moodle	2.2 to 2.2.1+; 2.1 to 2.1.4+; 2.0 to 2.0.7+

References

http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077635.htmlThird Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078209.htmlThird Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078210.htmlThird Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2012-May/080712.htmlThird Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2012-May/081047.htmlThird Party Advisory
https://access.redhat.com/security/cve/cve-2012-1169Broken Link
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-1169Issue Tracking, Patch, Third Party Advisory
https://moodle.org/mod/forum/discuss.php?d=198625Patch, Vendor Advisory
https://security-tracker.debian.org/tracker/CVE-2012-1169Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077635.htmlThird Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078209.htmlThird Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078210.htmlThird Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2012-May/080712.htmlThird Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2012-May/081047.htmlThird Party Advisory
https://access.redhat.com/security/cve/cve-2012-1169Broken Link
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-1169Issue Tracking, Patch, Third Party Advisory
https://moodle.org/mod/forum/discuss.php?d=198625Patch, Vendor Advisory
https://security-tracker.debian.org/tracker/CVE-2012-1169Third Party Advisory

Timeline

Published: Nov 14, 2019
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2012

CVE-2012-11707.5Moodle before 2.2.2 has an external enrolment plugin context check issue where capability checks are not thorough CVE-2012-11715.0The libxml RSHUTDOWN function in PHP 5.x allows remote attackers to bypass the open_basedir protection mechanism and read arbitrary files vi CVE-2012-11725.8The file-upload implementation in rfc1867.c in PHP before 5.4.0 does not properly handle invalid [ (open square bracket) characters in name CVE-2012-11736.8Multiple integer overflows in tiff_getimage.c in LibTIFF 3.9.4 allow remote attackers to execute arbitrary code via a crafted tile size in a CVE-2012-11743.3The rm_rf_children function in util.c in the systemd-logind login manager in systemd before 44, when logging out, allows local users to dele CVE-2012-11756.8Integer overflow in the GnashImage::size method in libbase/GnashImage.h in GNU Gnash 0.8.10 allows remote attackers to cause a denial of ser CVE-2012-11765.0Buffer overflow in the fribidi_utf8_to_unicode function in PyFriBidi before 0.11.0 allows remote attackers to cause a denial of service (app CVE-2012-11775.1libgdata before 0.10.2 and 0.11.x before 0.11.1 does not validate SSL certificates, which allows remote attackers to obtain user names and p CVE-2012-11785.0The msn_oim_report_to_user function in oim.c in the MSN protocol plugin in libpurple in Pidgin before 2.10.2 allows remote servers to cause CVE-2012-11795.2The Linux kernel before 3.3.1, when KVM is used, allows guest OS users to cause a denial of service (host OS crash) by leveraging administra CVE-2012-11805.0Use-after-free vulnerability in nginx before 1.0.14 and 1.1.x before 1.1.17 allows remote HTTP servers to obtain sensitive information from CVE-2012-11815.0fcgid_spawn_ctl.c in the mod_fcgid module 2.3.6 for the Apache HTTP Server does not recognize the FcgidMaxProcessesPerClass directive for a