CVE-2017-2643

In Moodle 3.2.x, global search displays user names for unauthenticated users.

• CWE-200

• http://www.securityfocus.com/bid/96978Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1038174
• https://moodle.org/mod/forum/discuss.php?d=349420Patch, Third Party Advisory
• http://www.securityfocus.com/bid/96978Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1038174
• https://moodle.org/mod/forum/discuss.php?d=349420Patch, Third Party Advisory

Published

Mar 26, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-2637A design flaw issue was found in the Red Hat OpenStack Platf…9.9
• CVE-2017-2638It was found that the REST API in Infinispan before version …6.5
• CVE-2017-2639It was found that CloudForms does not verify that the server…6.5
• CVE-2017-2640An out-of-bounds write flaw was found in the way Pidgin befo…7.5
• CVE-2017-2641In Moodle 2.x and 3.x, SQL injection can occur via user pref…
• CVE-2017-2642Moodle 3.x has user fullname disclosure on the user preferen…
• CVE-2017-2644In Moodle 3.x, XSS can occur via evidence of prior learning.
• CVE-2017-2645In Moodle 3.x, XSS can occur via attachments to evidence of …
• CVE-2017-2646It was found that when Keycloak before 2.5.5 receives a Logo…7.5
• CVE-2017-2647The KEYS subsystem in the Linux kernel before 3.18 allows lo…
• CVE-2017-2648It was found that jenkins-ssh-slaves-plugin before version 1…6.8
• CVE-2017-2649It was found that the Active Directory Plugin for Jenkins up…