Moodle contains a flaw that may lead to unauthorized disclosure of potentially sensitive information. The issue is triggered when last access is included in a list of fields forced to be hidden. This may allow a remote attacker to gain access to a users' last access..