Lucene search
Veracode Vulnerability DatabaseVERACODE:37348HistorySep 30, 2022 - 6:17 a.m.
Improper Authentication
2022-09-3006:17:08
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
12
0.001 Low
EPSS
Percentile
31.3%
moodle is using improper authentication. The vulnerability exists in logout_db_session function in helper.php where a session hijack risk was identified in the shibboleth authentication plugin, in which the sessions weren’t killed after the user logging out.
| CPE | Name | Operator | Version |
|---|---|---|---|
| moodle/moodle | le | v3.11.2 | |
| moodle/moodle | le | v3.9.9 | |
| moodle/moodle | le | v3.10.6 | |
| moodle/moodle | le | v3.11.2 | |
| moodle/moodle | le | v3.9.9 | |
| moodle/moodle | le | v3.10.6 |
Related
ubuntucve
ubuntucve
CVE-2021-40691
2022-09-29 00:00:00
prion
prion
Session fixation
2022-09-29 03:15:00
cve
cve
CVE-2021-40691
2022-09-29 03:15:14
osv
osv
CVE-2021-40691
2022-09-29 03:15:14
Moodle Improper Authentication
2022-09-30 00:00:30
BIT-moodle-2021-40691
2024-03-06 11:07:44
github
github
Moodle Improper Authentication
2022-09-30 00:00:30
nvd
nvd
CVE-2021-40691
2022-09-29 03:15:14
cvelist
cvelist
CVE-2021-40691
2022-01-21 18:17:49
nessus
nessus
Moodle 3.10.x < 3.10.7 Multiple Vulnerabilities
2023-02-20 00:00:00
Moodle 3.9.x < 3.9.10 Multiple Vulnerabilities
2023-02-20 00:00:00
Moodle 3.11.x < 3.11.3 Multiple Vulnerabilities
2023-02-20 00:00:00
openvas
openvas
Moodle Session Hijack Vulnerability (MSA-21-0032)
2023-08-16 00:00:00