|Topic:||IMS enterprise enrolment file may disclose sensitive information|
|Versions affected:||<1.9.11 and <2.0.2|
|Reported by:||Internal code review|
|Solution:||Upgrade to latest version|
|Workaround:||Move the imsenterprise-enrol.xml file outside of the course files area|
Putting the IMS enterprise enrol file in the course files area may result in disclosure of sensitive information.