Multiple unspecified authentication plugins in Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 store the MD5 hashes for passwords in the user table, even when the cached hashes are not used by the plugin, which might make it easier for attackers to obtain credentials via unspecified vectors.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Moodle | — | Upgrade to the latest version of Moodle | Dec 4, 2018 | Dec 16, 2009 |
| Suse | — | Upgrade moodle-caUpgrade moodle-viUpgrade moodle-afUpgrade moodle-zh_cnUpgrade moodle-ukUpgrade moodle-thUpgrade moodle-bsUpgrade moodle-bgUpgrade moodle-faUpgrade moodle-beUpgrade moodle-huUpgrade moodle-roUpgrade moodle-ruUpgrade moodle-soUpgrade moodle-knUpgrade moodle-euUpgrade moodle-plUpgrade moodle-ltUpgrade moodle-hrUpgrade moodle-svUpgrade moodle-gaUpgrade moodle-frUpgrade moodle-idUpgrade moodle-heUpgrade moodle-ptUpgrade moodle-lvUpgrade moodle-msUpgrade moodle-etUpgrade moodle-koUpgrade moodle-slUpgrade moodle-kmUpgrade moodle-arUpgrade moodle-glUpgrade moodle-de_duUpgrade moodle-sqUpgrade moodle-csUpgrade moodle-daUpgrade moodle-srUpgrade moodle-trUpgrade moodle-nnUpgrade moodle-noUpgrade moodle-deUpgrade moodle-skUpgrade moodle-elUpgrade moodle-kaUpgrade moodle-itUpgrade moodle-mi_tnUpgrade moodle-tlUpgrade moodle-esUpgrade moodle-fiUpgrade moodle-nlUpgrade moodle-isUpgrade moodleUpgrade moodle-jaUpgrade moodle-hi | Feb 17, 2015 | Dec 15, 2009 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub