1. Home
  2. CVE Database
  3. CVE-2007-1647
HIGH · 7.8

CVE-2007-1647

Moodle 1.5.2 and earlier stores sensitive information under the web root with insufficient access control, and provides directory listings, which allows remote attackers to obtain user names, password...

Vulnerability Description

Moodle 1.5.2 and earlier stores sensitive information under the web root with insufficient access control, and provides directory listings, which allows remote attackers to obtain user names, password hashes, and other sensitive information via a direct request for session (sess_*) files in moodledata/sessions/.

CVSS Score

7.8

HIGH

AV:N/AC:L/Au:N/C:C/I:N/A:N
Confidentiality
COMPLETE
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
MoodleMoodle<= 1.5.2

References

FAQ

What is CVE-2007-1647?

CVE-2007-1647 is a vulnerability with a CVSS score of 7.8 (HIGH). Moodle 1.5.2 and earlier stores sensitive information under the web root with insufficient access control, and provides directory listings, which allows remote attackers to obtain user names, password...

How severe is CVE-2007-1647?

CVE-2007-1647 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2007-1647?

Check the references section above for vendor advisories and patch information. Affected products include: Moodle Moodle.