Description

login/confirm.php in Moodle through 2.5.9, 2.6.x before 2.6.11, 2.7.x before 2.7.8, and 2.8.x before 2.8.6 allows remote authenticated users to bypass intended login restrictions by leveraging access to an unconfirmed suspended account.

Remediation

References

CVE-2015-3179

Related Vulnerabilities

Joomla Insufficient Session Expiration Vulnerability (CVE-2021-26037)

Dolibarr Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2018-16809)

WordPress Plugin Fetch Tweets Cross-Site Scripting (2.6.4)

ownCloud Exposure of Resource to Wrong Sphere Vulnerability (CVE-2022-31649)

MySQL CVE-2017-3529 Vulnerability (CVE-2017-3529)

Severity

Low

Classification

CVE-2015-3179 CWE-264

Tags

Missing Update Known Vulnerabilities