Description
auth/ldap/ntlmsso_attempt.php in Moodle 2.0.x before 2.0.10, 2.1.x before 2.1.7, 2.2.x before 2.2.4, and 2.3.x before 2.3.1 redirects users from an https LDAP login URL to an http URL, which allows remote attackers to obtain sensitive information by sniffing the network.
Remediation
References
Related Vulnerabilities
WordPress Plugin Jigoshop-Store Toolkit Privilege Escalation (1.3.7)
IBM WebSEAL Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-1474)
WordPress Plugin Migration, Backup, Staging-WPvivid PHAR Deserialization (0.9.74)
WordPress 4.3.x Denial of Service Vulnerability (4.3 - 4.3.15)
qdPM Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2020-26165)