Multiple unspecified authentication plugins in Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 store the MD5 hashes for passwords in the user table, even when the cached hashes are not used by the plugin, which might make it easier for attackers to obtain credentials via unspecified vectors.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Moodle | — | Upgrade to the latest version of Moodle | Dec 4, 2018 | Dec 16, 2009 |
| Suse | — | Upgrade moodle-bsUpgrade moodle-ptUpgrade moodle-euUpgrade moodle-msUpgrade moodle-beUpgrade moodle-knUpgrade moodle-soUpgrade moodle-lvUpgrade moodle-caUpgrade moodle-etUpgrade moodle-viUpgrade moodle-frUpgrade moodle-hrUpgrade moodle-idUpgrade moodle-svUpgrade moodle-afUpgrade moodle-thUpgrade moodle-heUpgrade moodle-ruUpgrade moodle-huUpgrade moodle-faUpgrade moodle-koUpgrade moodle-ukUpgrade moodle-ltUpgrade moodle-gaUpgrade moodle-zh_cnUpgrade moodle-plUpgrade moodle-bgUpgrade moodle-roUpgrade moodle-csUpgrade moodle-trUpgrade moodle-noUpgrade moodle-deUpgrade moodle-isUpgrade moodle-nnUpgrade moodle-sqUpgrade moodle-srUpgrade moodle-daUpgrade moodle-de_duUpgrade moodle-fiUpgrade moodle-glUpgrade moodle-slUpgrade moodle-jaUpgrade moodle-esUpgrade moodle-arUpgrade moodle-hiUpgrade moodle-tlUpgrade moodle-kmUpgrade moodle-nlUpgrade moodleUpgrade moodle-elUpgrade moodle-kaUpgrade moodle-skUpgrade moodle-mi_tnUpgrade moodle-it | Feb 17, 2015 | Dec 15, 2009 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub