Security Announcements

My ugly mug
MSA-12-0059: Information leak in Database activity module
Topic: Members of seperate groups can see Database activity entries for other groups
Severity/Risk: Minor
Versions affected: 2.3 to 2.3.2+, 2.2 to 2.2.5+, 2.1 to 2.1.8+
Reported by: Richard Meyer
Issue no.: MDL-34448

CVE Identifier:

Changes (master):


Within the Database activity module, when separate groups were used, members of one group were able to see entries created by members of another group by completing an advanced search.