Lucene search
Veracode Vulnerability DatabaseVERACODE:4685HistoryJul 26, 2017 - 3:04 a.m.
Predictable Password Recovery
2017-07-2603:04:39
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
EPSS
0.003
Percentile
71.5%
Moodle is vulnerable to predictable password recovery. The vulnerability exists because of not enough randomization of PHP mt_rand function() used in random_string() and complex_random_string() functions.
Related
cve
cve
CVE-2015-5267
2016-02-22 05:59:07
nvd
nvd
CVE-2015-5267
2016-02-22 05:59:07
osv
osv
Moodle uses predictable password-recovery tokens
2022-05-13 01:12:47
ubuntucve
ubuntucve
CVE-2015-5267
2016-02-22 00:00:00
prion
prion
Code injection
2016-02-22 05:59:00
cvelist
cvelist
CVE-2015-5267
2016-02-22 02:00:00
github
github
Moodle uses predictable password-recovery tokens
2022-05-13 01:12:47
openvas
openvas
Mageia: Security Advisory (MGASA-2015-0381)
2015-10-15 00:00:00
Fedora Update for moodle FEDORA-2015-2
2015-12-12 00:00:00
mageia
mageia
Updated moodle packages fix security vulnerabilities
2015-09-23 22:42:52
nessus
nessus
FreeBSD : moodle -- multiple vulnerabilities (c2fcbec2-5daa-11e5-9909-002590263bf5)
2015-09-18 00:00:00
Fedora 23 : moodle-2.9.3-1.fc23 (2015-98fc0d20ad)
2016-03-04 00:00:00
freebsd
freebsd
moodle -- multiple vulnerabilities
2015-09-14 00:00:00