CVE-2010-1613

UNKNOWN

Moodle 1.8.x and 1.9.x before 1.9.8 does not enable the "Regenerate session id during login" setting by default, which makes it easier for remote attackers to conduct session fixation attacks

Published Apr 29, 2010

Modified 2 years ago

Details

Moodle 1.8.x and 1.9.x before 1.9.8 does not enable the "Regenerate session id during login" setting by default, which makes it easier for remote attackers to conduct session fixation attacks.

References

ADVISORY

http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html

WEB

http://moodle.org/security/

WEB

http://www.vupen.com/english/advisories/2010/1107

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2010-1613

CVSS Analysis

CVSS v2.0

6.8