CVE-2009-4302

login/index_form.html in Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 links to an index page on the HTTP port even when the page is served from an HTTPS port…

published December 16, 2009

CVSS
—
EPSS
3%
Percentile
85.1
In the wild
Unconfirmed
What it is

login/index_form.html in Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 links to an index page on the HTTP port even when the page is served from an HTTPS port, which might cause login credentials to be sent in cleartext, even when SSL is intended, and allows remote attackers to obtain these credentials by sniffing.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02574 · 85.1th percentile
Published
2009-12-16T01:00Z
EPSS history
Timeline
  • 16 DEC 01:00Z
    login/index_form.html in Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 links to an index page on the HTTP port even when the page is served from an HTTPS port…
    cvelistv5