In Moodle 3.x, quiz web services allow students to see quiz results when it is prohibited in the settings.
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
Link | Tags |
---|---|
https://moodle.org/mod/forum/discuss.php?d=364383 | vendor advisory |
http://www.securityfocus.com/bid/102754 | third party advisory vdb entry |