PT-2024-27916 · Alt Linux+1 · Alt Linux+1

Juan Leyva · Published 2024-06-18 · Updated 2025-08-28 · CVE-2024-38277

Positive Technologies (AI Summary)

CVSS v4.0

6.9

Medium

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned.

Description The issue concerns the generation of unique keys for QR login and auto-login. Currently, the same key can be used interchangeably between the two, which is insecure. A unique key should be generated for each to prevent this.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Inadequate Encryption Strength

Weakness Enumeration

CWE-326

CWE-324

Related Identifiers

ALT-PU-2024-16385

ALT-PU-2024-16417

BDU:2025-10840

BIT-MOODLE-2024-38277

CVE-2024-38277

GHSA-R82W-3PHG-QVR4

Affected Products

Alt Linux

Red Os

References · 16

• https://moodle.org/mod/forum/discuss.php?d=459502 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/GHTIX55J4Q4LEOMLNEA4OZSWVEENQX7E · Vendor Advisory
• https://osv.dev/vulnerability/BIT-moodle-2024-38277 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-38277 · Security Note
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/F7AZYR7EXV6E5SQE2GYTNQE3NOENJCQ6 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-10840 · Security Note
• https://osv.dev/vulnerability/CVE-2024-38277 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-r82w-3phg-qvr4 · Vendor Advisory
• https://github.com/moodle/moodle · Note
• https://github.com/moodle/moodle/commit/1aea4a15281d81f2414a95aa485b8a6551708f57 · Note
• https://github.com/moodle/moodle/commit/d05795db8eece2943241a29a5443fb4685ba6070 · Note
• https://github.com/moodle/moodle/commit/0caedaab7cd5a46331d56654ce9301b0a5a04c56 · Note
• https://github.com/moodle/moodle/commit/ad46a97f5355f0451d52e9f1a0f528d9a6f12e06 · Note
• https://redos.red-soft.ru/support/secure/uyazvimosti/support/secure/uyazvimosti/mnozhestvennye-uyazvimosti-moodle-28082025 · Note
• https://t.me/cvenotify/84604 · Telegram Post