Security Announcements

 
 
Picture of Helen Foster
MSA-11-0008: IMS enterprise enrolment file may disclose sensitive information
 
Topic: IMS enterprise enrolment file may disclose sensitive information
Severity: Major
Versions affected: <1.9.11 and <2.0.2
Reported by: Internal code review
Issue no.: MDL-26189
Solution: Upgrade to latest version
Workaround: Move the imsenterprise-enrol.xml file outside of the course files area

Description:

Putting the IMS enterprise enrol file in the course files area may result in disclosure of sensitive information.