| Topic: | IMS enterprise enrolment file may disclose sensitive information |
| Severity: | Major |
| Versions affected: | <1.9.11 and <2.0.2 |
| Reported by: | Internal code review |
| Issue no.: | MDL-26189 |
| Solution: | Upgrade to latest version |
| Workaround: | Move the imsenterprise-enrol.xml file outside of the course files area |
Description:
Putting the IMS enterprise enrol file in the course files area may result in disclosure of sensitive information.