A vulnerability in Moodle allows authorized users with manager privileges to bypass visibility restrictions on user profile fields when filtering user lists. This flaw enables such users to infer information from profile attributes they are not directly permitted to view, leading to unauthorized information disclosure. The issue does not affect system availability or integrity and has a low severity rating.