CVE-2010-1613

Moodle 1.8.x and 1.9.x before 1.9.8 does not enable the "Regenerate session id during login" setting by default, which makes it easier for remote attackers to…

published April 29, 2010

CVSS
—
EPSS
2%
Percentile
78.5
In the wild
Unconfirmed
What it is

Moodle 1.8.x and 1.9.x before 1.9.8 does not enable the "Regenerate session id during login" setting by default, which makes it easier for remote attackers to conduct session fixation attacks.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01810 · 78.5th percentile
Published
2010-04-29T21:00Z
EPSS history
Timeline
  • 29 APR 21:00Z
    Moodle 1.8.x and 1.9.x before 1.9.8 does not enable the "Regenerate session id during login" setting by default, which makes it easier for remote attackers to…
    cvelistv5