Lucene search
Veracode Vulnerability DatabaseVERACODE:4571HistoryJul 14, 2017 - 8:57 a.m.
Impersonation Attack
2017-07-1408:57:35
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
0.003 Low
EPSS
Percentile
65.3%
Moodle is vulnerable to information disclosures. The library places its session key in a string in the URL, allowing a malicious user to obtain this key and impersonate another user.
| CPE | Name | Operator | Version |
|---|---|---|---|
| moodle/moodle | le | 2.6.1 | |
| moodle/moodle | le | 2.4.8 | |
| moodle/moodle | le | 2.5.4 | |
| moodle/moodle | le | 2.3.11 |
Related
prion
prion
Design/Logic Flaw
2014-03-24 14:20:00
cvelist
cvelist
CVE-2014-0125
2014-03-22 01:00:00
ubuntucve
ubuntucve
CVE-2014-0125
2014-03-24 00:00:00
osv
osv
Moodle places a session key in a URL
2022-05-13 01:12:50
nvd
nvd
CVE-2014-0125
2014-03-24 14:20:39
cve
cve
CVE-2014-0125
2014-03-24 14:20:39
github
github
Moodle places a session key in a URL
2022-05-13 01:12:50
nessus
nessus
Fedora 20 : moodle-2.5.5-1.fc20 (2014-4163)
2014-03-31 00:00:00
Fedora 19 : moodle-2.4.9-1.fc19 (2014-4152)
2014-03-31 00:00:00
Moodle 2.4.x < 2.4.9 Multiple Vulnerabilities
2016-07-21 00:00:00
openvas
openvas
Fedora Update for moodle FEDORA-2014-4163
2014-04-03 00:00:00
Mageia: Security Advisory (MGASA-2014-0160)
2022-01-28 00:00:00
Fedora Update for moodle FEDORA-2014-4163
2014-04-03 00:00:00
fedora
fedora
[SECURITY] Fedora 20 Update: moodle-2.5.5-1.fc20
2014-03-30 06:16:54
[SECURITY] Fedora 19 Update: moodle-2.4.9-1.fc19
2014-03-30 06:10:35
[SECURITY] Fedora 20 Update: moodle-2.5.6-1.fc20
2014-05-29 23:27:45
mageia
mageia
Updated moodle packages fix multiple security vulnerabilities
2014-04-03 21:23:49