{"id":"CVE-2011-4583","aliases":["EUVD-2011-4508","GHSA-4r4x-49qh-hfgv"],"status":"published","title":"Moodle 2.0.x before 2.0.6 and 2.1.x before 2.1.3 displays web service tokens associated with (1)...","description":"Moodle 2.0.x before 2.0.6 and 2.1.x before 2.1.3 displays web service tokens associated with (1) disabled services and (2) users who no longer have authorization, which allows remote authenticated users to have an unspecified impact by reading these tokens.","severity":{"version":"2.0","score":6.5,"vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01272,"percentile":0.70059,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-264"],"published":"2012-07-20T10:00:00Z","modified":"2026-06-16T23:35:05Z","products":[{"vendor":"moodle","product":"moodle"}],"references":[{"url":"http://moodle.org/mod/forum/discuss.php?d=191750","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=761248","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://git.moodle.org/gw?p=moodle.git\u0026a=search\u0026h=HEAD\u0026st=commit\u0026s=MDL-28670\u0026sr=1","tags":["x_refsource_CONFIRM","x_transferred","Patch"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2011-4583"},{"url":"https://github.com/advisories/GHSA-4r4x-49qh-hfgv"}],"sources":{"cve":[{"id":"CVE-2011-4583","description":"Moodle 2.0.x before 2.0.6 and 2.1.x before 2.1.3 displays web service tokens associated with (1) disabled services and (2) users who no longer have authorization, which allows remote authenticated users to have an unspecified impact by reading these tokens.","status":"published","published":"2012-07-20T10:00:00Z","modified":"2024-08-07T00:09:19.343Z","updated_at":"2026-11-02T14:35:38.321377Z"}],"euvd":[{"id":"EUVD-2011-4508","description":"Moodle 2.0.x before 2.0.6 and 2.1.x before 2.1.3 displays web service tokens associated with (1) disabled services and (2) users who no longer have authorization, which allows remote authenticated users to have an unspecified impact by reading these tokens.","status":"published","published":"2012-07-20T10:00:00Z","modified":"2024-08-07T00:09:19Z","updated_at":"2026-11-03T01:39:48.961231Z"}],"ghsa":[{"id":"GHSA-4r4x-49qh-hfgv","title":"Moodle 2.0.x before 2.0.6 and 2.1.x before 2.1.3 displays web service tokens associated with (1)...","description":"Moodle 2.0.x before 2.0.6 and 2.1.x before 2.1.3 displays web service tokens associated with (1) disabled services and (2) users who no longer have authorization, which allows remote authenticated users to have an unspecified impact by reading these tokens.","status":"published","published":"2022-05-13T01:13:16Z","modified":"2023-02-01T05:04:09Z","updated_at":"2026-11-02T14:50:07.876412Z"}],"nvd":[{"id":"CVE-2011-4583","description":"Moodle 2.0.x before 2.0.6 and 2.1.x before 2.1.3 displays web service tokens associated with (1) disabled services and (2) users who no longer have authorization, which allows remote authenticated users to have an unspecified impact by reading these tokens.","status":"published","published":"2012-07-20T10:40:35.797Z","modified":"2026-06-16T23:35:05.4Z","cvss":[{"version":"2.0","score":6.5,"vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-264"],"updated_at":"2026-11-02T14:02:12.272092Z"}]}}