CVE-2012-1169

MediumCVSS 5.3/10Last modified Jun 16, 2026

Description

Moodle before 2.2.2 has Personal information disclosure, when administrative setting users name display is set to first name only full names are shown in page breadcrumbs.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-200

Affected software

No affected versions have been published.

Timeline

Published
Nov 14, 2019
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2012

CVE-2012-11707.5Moodle before 2.2.2 has an external enrolment plugin context check issue where capability checks are not thoroughCVE-2012-11715.0The libxml RSHUTDOWN function in PHP 5.x allows remote attackers to bypass the open_basedir protection mechanism and read arbitrary files viCVE-2012-11725.8The file-upload implementation in rfc1867.c in PHP before 5.4.0 does not properly handle invalid [ (open square bracket) characters in name CVE-2012-11736.8Multiple integer overflows in tiff_getimage.c in LibTIFF 3.9.4 allow remote attackers to execute arbitrary code via a crafted tile size in aCVE-2012-11743.3The rm_rf_children function in util.c in the systemd-logind login manager in systemd before 44, when logging out, allows local users to deleCVE-2012-11756.8Integer overflow in the GnashImage::size method in libbase/GnashImage.h in GNU Gnash 0.8.10 allows remote attackers to cause a denial of serCVE-2012-11765.0Buffer overflow in the fribidi_utf8_to_unicode function in PyFriBidi before 0.11.0 allows remote attackers to cause a denial of service (appCVE-2012-11775.1libgdata before 0.10.2 and 0.11.x before 0.11.1 does not validate SSL certificates, which allows remote attackers to obtain user names and pCVE-2012-11785.0The msn_oim_report_to_user function in oim.c in the MSN protocol plugin in libpurple in Pidgin before 2.10.2 allows remote servers to cause CVE-2012-11795.2The Linux kernel before 3.3.1, when KVM is used, allows guest OS users to cause a denial of service (host OS crash) by leveraging administraCVE-2012-11805.0Use-after-free vulnerability in nginx before 1.0.14 and 1.1.x before 1.1.17 allows remote HTTP servers to obtain sensitive information from CVE-2012-11815.0fcgid_spawn_ctl.c in the mod_fcgid module 2.3.6 for the Apache HTTP Server does not recognize the FcgidMaxProcessesPerClass directive for a
CVE-2012-1169: Medium severity, CVSS 5.3 | Vulnix