PT-2014-8311 · Moodle · Moodle

Aaron Barnes

·

Publicado

2014-11-22

·

Atualizado

2022-05-13

·

CVE-2014-7845

CVSS v2.0

7.5

Alta

VetorAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Moodle versions 2.4.11 and earlier, 2.5.x before 2.5.9, 2.6.x before 2.6.6, 2.7.x before 2.7.3
Description The issue concerns the generate password function, which does not provide a sufficient number of possible temporary passwords. This allows remote attackers to obtain access via a brute-force attack.
Recommendations For versions 2.4.11 and earlier, update to a version later than 2.4.11. For versions 2.5.x before 2.5.9, update to version 2.5.9 or later. For versions 2.6.x before 2.6.6, update to version 2.6.6 or later. For versions 2.7.x before 2.7.3, update to version 2.7.3 or later.

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-255CWE-1391

Identificadores relacionados

CVE-2014-7845
GHSA-9V64-447R-WCH6
MGASA-2014-0483

Produtos afetados

Moodle