Lucene search
Ubuntu.comUB:CVE-2014-7845HistoryNov 24, 2014 - 12:00 a.m.
CVE-2014-7845
2014-11-2400:00:00
ubuntu.com
ubuntu.com
13
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS
0.007
Percentile
81.0%
The generate_password function in Moodle through 2.4.11, 2.5.x before
2.5.9, 2.6.x before 2.6.6, and 2.7.x before 2.7.3 does not provide a
sufficient number of possible temporary passwords, which allows remote
attackers to obtain access via a brute-force attack.
Related
nvd
nvd
CVE-2014-7845
2014-11-24 11:59:10
osv
osv
Moodle Temporary Passwords are Brute Force-able
2022-05-13 01:12:43
cvelist
cvelist
CVE-2014-7845
2014-11-24 11:00:00
prion
prion
Design/Logic Flaw
2014-11-24 11:59:00
veracode
veracode
Insecure Random Password Generation
2017-07-28 04:26:36
github
github
Moodle Temporary Passwords are Brute Force-able
2022-05-13 01:12:43
cve
cve
CVE-2014-7845
2014-11-24 11:59:10
nessus
nessus
openvas
openvas
Mageia: Security Advisory (MGASA-2014-0483)
2022-01-28 00:00:00
mageia
mageia
Updated moodle package fixes security vulnerabilities
2014-11-22 13:54:50
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS
0.007
Percentile
81.0%
Related for UB:CVE-2014-7845