Multiple unspecified authentication plugins in Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 store the MD5 hashes for passwords in the user table, even when the cached hashes are not used by the plugin, which might make it easier for attackers to obtain credentials via unspecified vectors.
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Moodle | — | Upgrade to the latest version of Moodle | Dec 4, 2018 | Dec 16, 2009 |
| Suse | — | Upgrade moodle-etUpgrade moodle-knUpgrade moodle-thUpgrade moodle-huUpgrade moodle-svUpgrade moodle-idUpgrade moodle-bsUpgrade moodle-afUpgrade moodle-roUpgrade moodle-beUpgrade moodle-caUpgrade moodle-lvUpgrade moodle-koUpgrade moodle-bgUpgrade moodle-gaUpgrade moodle-zh_cnUpgrade moodle-heUpgrade moodle-faUpgrade moodle-ptUpgrade moodle-ukUpgrade moodle-ltUpgrade moodle-msUpgrade moodle-euUpgrade moodle-ruUpgrade moodle-hrUpgrade moodle-frUpgrade moodle-plUpgrade moodle-soUpgrade moodle-viUpgrade moodle-skUpgrade moodle-itUpgrade moodle-tlUpgrade moodle-glUpgrade moodleUpgrade moodle-hiUpgrade moodle-fiUpgrade moodle-jaUpgrade moodle-deUpgrade moodle-csUpgrade moodle-noUpgrade moodle-mi_tnUpgrade moodle-elUpgrade moodle-arUpgrade moodle-slUpgrade moodle-kmUpgrade moodle-trUpgrade moodle-srUpgrade moodle-nnUpgrade moodle-daUpgrade moodle-isUpgrade moodle-sqUpgrade moodle-esUpgrade moodle-kaUpgrade moodle-nlUpgrade moodle-de_du | Feb 17, 2015 | Dec 15, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub