Количество 5
Количество 5
CVE-2015-5267
lib/moodlelib.php in Moodle through 2.6.11, 2.7.x before 2.7.10, 2.8.x before 2.8.8, and 2.9.x before 2.9.2 relies on the PHP mt_rand function to implement the random_string and complex_random_string functions, which makes it easier for remote attackers to predict password-recovery tokens via a brute-force approach.
CVE-2015-5267
lib/moodlelib.php in Moodle through 2.6.11, 2.7.x before 2.7.10, 2.8.x before 2.8.8, and 2.9.x before 2.9.2 relies on the PHP mt_rand function to implement the random_string and complex_random_string functions, which makes it easier for remote attackers to predict password-recovery tokens via a brute-force approach.
CVE-2015-5267
lib/moodlelib.php in Moodle through 2.6.11, 2.7.x before 2.7.10, 2.8.x ...
GHSA-382v-gxj9-ffhc
Moodle uses predictable password-recovery tokens
BDU:2016-00592
Уязвимость системы управления обучением Мoodle, позволяющая нарушителю получить пароль пользователя
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2015-5267 lib/moodlelib.php in Moodle through 2.6.11, 2.7.x before 2.7.10, 2.8.x before 2.8.8, and 2.9.x before 2.9.2 relies on the PHP mt_rand function to implement the random_string and complex_random_string functions, which makes it easier for remote attackers to predict password-recovery tokens via a brute-force approach. | CVSS3: 7.5 | 0% Низкий | больше 9 лет назад |
 | CVE-2015-5267 lib/moodlelib.php in Moodle through 2.6.11, 2.7.x before 2.7.10, 2.8.x before 2.8.8, and 2.9.x before 2.9.2 relies on the PHP mt_rand function to implement the random_string and complex_random_string functions, which makes it easier for remote attackers to predict password-recovery tokens via a brute-force approach. | CVSS3: 7.5 | 0% Низкий | больше 9 лет назад |
| CVE-2015-5267 lib/moodlelib.php in Moodle through 2.6.11, 2.7.x before 2.7.10, 2.8.x ... | CVSS3: 7.5 | 0% Низкий | больше 9 лет назад |
| GHSA-382v-gxj9-ffhc Moodle uses predictable password-recovery tokens | CVSS3: 7.5 | 0% Низкий | больше 3 лет назад |
 | BDU:2016-00592 Уязвимость системы управления обучением Мoodle, позволяющая нарушителю получить пароль пользователя | CVSS2: 5 | 0% Низкий | больше 9 лет назад |
Уязвимостей на страницу