Lucene search
Veracode Vulnerability DatabaseVERACODE:4341HistoryJun 01, 2017 - 4:48 a.m.
Autofill Passwords
2017-06-0104:48:28
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
EPSS
0.001
Percentile
20.0%
Moodle is vulnerable to autofilled passwords. The form-autocompletion functionality reveals passwords in a non-password field on the create groups page. This only occurs when used on the safari browser on an iPad device.
References
git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=6e9989dbd3f261b2e1586ff77b0bf22fc7091485
git.moodle.org/gw?p=moodle.git;a=commit;h=6e9989dbd3f261b2e1586ff77b0bf22fc7091485
moodle.org/mod/forum/discuss.php?d=194019
bugzilla.redhat.com/show_bug.cgi?id=783532
git.moodle.org/gw?p=moodle.git;a=commit;h=6e9989dbd3f261b2e1586ff77b0bf22fc7091485
moodle.org/mod/forum/discuss.php?d=194019
Related
cvelist
cvelist
CVE-2012-0800
2012-07-17 10:00:00
cve
cve
CVE-2012-0800
2012-07-17 10:20:53
prion
prion
Design/Logic Flaw
2012-07-17 10:20:00
ubuntucve
ubuntucve
CVE-2012-0800
2012-07-17 00:00:00
nvd
nvd
CVE-2012-0800
2012-07-17 10:20:53
fedora
fedora
[SECURITY] Fedora 15 Update: moodle-1.9.16-1.fc15
2012-02-02 17:21:30
[SECURITY] Fedora 16 Update: moodle-2.0.7-1.fc16
2012-02-02 17:27:16
openvas
openvas
Fedora Update for moodle FEDORA-2012-0939
2012-02-03 00:00:00
Fedora Update for moodle FEDORA-2012-0939
2012-02-03 00:00:00
Fedora Update for moodle FEDORA-2012-0913
2012-04-02 00:00:00
nessus
nessus
Fedora 16 : moodle-2.0.7-1.fc16 (2012-0913)
2012-02-03 00:00:00
Fedora 15 : moodle-1.9.16-1.fc15 (2012-0939)
2012-02-03 00:00:00