Candidate: CVE-2009-4303 PublicDate: 2009-12-16 01:30:00 UTC References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4303 Description: Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 stores (1) password hashes and (2) unspecified "secrets" in backup files, which might allow attackers to obtain sensitive information. Ubuntu-Description: Notes: Bugs: Priority: low Discovered-by: Assigned-to: CVSS: Patches_moodle: upstream_moodle: needs-triage dapper_moodle: ignored (reached end-of-life) hardy_moodle: ignored (reached end-of-life) intrepid_moodle: needed (reached end-of-life) jaunty_moodle: ignored (reached end-of-life) karmic_moodle: ignored (reached end-of-life) lucid_moodle: ignored (reached end-of-life) maverick_moodle: ignored (reached end-of-life) natty_moodle: not-affected (1.9.9.dfsg2-2) oneiric_moodle: not-affected (1.9.9.dfsg2-3) precise_moodle: not-affected (1.9.9.dfsg2-6) quantal_moodle: not-affected (1.9.9.dfsg2-6) raring_moodle: not-affected (1.9.9.dfsg2-6) saucy_moodle: not-affected (1.9.9.dfsg2-6) devel_moodle: not-affected (1.9.9.dfsg2-6)