IcProgress Innovación y Cualificación Plugin Broken Access Control Vulnerability

A broken access control vulnerability exists in the IcProgress Innovación y Cualificación plugin for Moodle. This vulnerability allows attackers to access sensitive information about other users, including public IP addresses and private messages. The issue arises from inadequate restrictions on user data access, enabling unauthorized information retrieval.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive user information, such as IP addresses and private messages.

Remediation

A new version has been released to address these vulnerabilities, and it has been implemented in all affected installations. The update process will be completed by December 2024.