Multiple unspecified authentication plugins in Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 store the MD5 hashes for passwords in the user table, even when the cached hashes are not used by the plugin, which might make it easier for attackers to obtain credentials via unspecified vectors.
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Moodle | — | Upgrade to the latest version of Moodle | Dec 4, 2018 | Dec 16, 2009 |
| Suse | — | Upgrade moodle-sqUpgrade moodle-kmUpgrade moodle-deUpgrade moodle-noUpgrade moodleUpgrade moodle-csUpgrade moodle-mi_tnUpgrade moodle-skUpgrade moodle-isUpgrade moodle-hiUpgrade moodle-srUpgrade moodle-itUpgrade moodle-glUpgrade moodle-kaUpgrade moodle-elUpgrade moodle-de_duUpgrade moodle-esUpgrade moodle-fiUpgrade moodle-tlUpgrade moodle-nlUpgrade moodle-arUpgrade moodle-trUpgrade moodle-daUpgrade moodle-slUpgrade moodle-nnUpgrade moodle-jaUpgrade moodle-heUpgrade moodle-ukUpgrade moodle-ltUpgrade moodle-lvUpgrade moodle-gaUpgrade moodle-knUpgrade moodle-bsUpgrade moodle-roUpgrade moodle-ptUpgrade moodle-soUpgrade moodle-viUpgrade moodle-ruUpgrade moodle-plUpgrade moodle-etUpgrade moodle-zh_cnUpgrade moodle-hrUpgrade moodle-koUpgrade moodle-bgUpgrade moodle-euUpgrade moodle-frUpgrade moodle-msUpgrade moodle-huUpgrade moodle-faUpgrade moodle-afUpgrade moodle-beUpgrade moodle-svUpgrade moodle-idUpgrade moodle-thUpgrade moodle-ca | Feb 17, 2015 | Dec 15, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub