CVE-2015-3179
EUVD-2022-241801.06.2015, 19:59
login/confirm.php in Moodle through 2.5.9, 2.6.x before 2.6.11, 2.7.x before 2.7.8, and 2.8.x before 2.8.6 allows remote authenticated users to bypass intended login restrictions by leveraging access to an unconfirmed suspended account.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| moodle | moodle | 𝑥 ≤ 2.5.9 |
| moodle | moodle | 2.5.0 |
| moodle | moodle | 2.5.1 |
| moodle | moodle | 2.5.2 |
| moodle | moodle | 2.5.3 |
| moodle | moodle | 2.5.4 |
| moodle | moodle | 2.5.5 |
| moodle | moodle | 2.5.6 |
| moodle | moodle | 2.5.7 |
| moodle | moodle | 2.5.8 |
| moodle | moodle | 2.6.0 |
| moodle | moodle | 2.6.1 |
| moodle | moodle | 2.6.2 |
| moodle | moodle | 2.6.3 |
| moodle | moodle | 2.6.4 |
| moodle | moodle | 2.6.5 |
| moodle | moodle | 2.6.6 |
| moodle | moodle | 2.6.7 |
| moodle | moodle | 2.6.8 |
| moodle | moodle | 2.6.9 |
| moodle | moodle | 2.6.10 |
| moodle | moodle | 2.7.0 |
| moodle | moodle | 2.7.1 |
| moodle | moodle | 2.7.2 |
| moodle | moodle | 2.7.3 |
| moodle | moodle | 2.7.4 |
| moodle | moodle | 2.7.5 |
| moodle | moodle | 2.7.6 |
| moodle | moodle | 2.7.7 |
| moodle | moodle | 2.8.0 |
| moodle | moodle | 2.8.1 |
| moodle | moodle | 2.8.2 |
| moodle | moodle | 2.8.3 |
| moodle | moodle | 2.8.4 |
| moodle | moodle | 2.8.5 |
𝑥
= Vulnerable software versions
Ubuntu Releases
Common Weakness Enumeration
References