Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 does not use a random password salt in config.php, which makes it easier for attackers to conduct brute-force password guessing attacks.
CVSS Details
- CVSS 3.1 Base Score: 7.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Moodle | — | Upgrade to the latest version of Moodle | Dec 4, 2018 | Dec 16, 2009 |
| Suse | — | Upgrade moodle-itUpgrade moodle-zh_cnUpgrade moodle-trUpgrade moodle-csUpgrade moodle-fiUpgrade moodle-plUpgrade moodle-caUpgrade moodle-kaUpgrade moodle-tlUpgrade moodle-lvUpgrade moodle-deUpgrade moodle-kmUpgrade moodle-thUpgrade moodle-nlUpgrade moodle-etUpgrade moodle-de_duUpgrade moodle-koUpgrade moodle-ptUpgrade moodle-faUpgrade moodle-daUpgrade moodle-soUpgrade moodle-afUpgrade moodle-sqUpgrade moodle-esUpgrade moodle-isUpgrade moodle-skUpgrade moodle-frUpgrade moodle-heUpgrade moodle-gaUpgrade moodle-ltUpgrade moodle-glUpgrade moodle-hrUpgrade moodle-bgUpgrade moodle-nnUpgrade moodle-euUpgrade moodle-beUpgrade moodle-huUpgrade moodle-arUpgrade moodle-msUpgrade moodle-knUpgrade moodle-noUpgrade moodle-ukUpgrade moodle-slUpgrade moodle-bsUpgrade moodle-jaUpgrade moodle-idUpgrade moodle-ruUpgrade moodle-srUpgrade moodle-viUpgrade moodle-hiUpgrade moodle-elUpgrade moodleUpgrade moodle-roUpgrade moodle-mi_tnUpgrade moodle-sv | Feb 17, 2015 | Dec 15, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub