Lucene search
Veracode Vulnerability DatabaseVERACODE:22257HistoryJan 08, 2020 - 1:42 a.m.
Authentication Bypass
2020-01-0801:42:47
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
3
0.002 Low
EPSS
Percentile
54.8%
moodle is vulnerable to authentication bypass. The vulnerability exists as it was possible for account compromise to occur due to the lack of additional verification after a change in user’s email address.
| CPE | Name | Operator | Version |
|---|---|---|---|
| moodle/moodle | le | 3.7.2 | |
| moodle/moodle | le | 3.6.6 | |
| moodle/moodle | le | 3.5.8 |
Related
symantec
symantec
Moodle CVE-2019-14880 Security Bypass Vulnerability
2019-11-18 00:00:00
osv
osv
Moodle Oauth 2 Insufficiently Protects Against Compromise
2022-05-24 17:12:57
CVE-2019-14880
2020-03-31 16:15:13
cvelist
cvelist
CVE-2019-14880
2020-03-31 15:11:30
prion
prion
Design/Logic Flaw
2020-03-31 16:15:00
github
github
Moodle Oauth 2 Insufficiently Protects Against Compromise
2022-05-24 17:12:57
cve
cve
CVE-2019-14880
2020-03-31 16:15:13
ubuntucve
ubuntucve
CVE-2019-14880
2020-03-31 00:00:00
nvd
nvd
CVE-2019-14880
2020-03-31 16:15:13
openvas
openvas
Moodle < 3.5.9, 3.6.x < 3.6.7, 3.7.x < 3.7.3 Multiple Vulnerabilities
2019-11-20 00:00:00