Vulnerability Details CVE-2010-1613
Moodle 1.8.x and 1.9.x before 1.9.8 does not enable the "Regenerate session id during login" setting by default, which makes it easier for remote attackers to conduct session fixation attacks.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 62.5%
CVSS Severity
CVSS v2 Score 6.8
Products affected by CVE-2010-1613
-
cpe:2.3:a:moodle:moodle:1.8.1
-
cpe:2.3:a:moodle:moodle:1.8.10
-
cpe:2.3:a:moodle:moodle:1.8.11
-
cpe:2.3:a:moodle:moodle:1.8.2
-
cpe:2.3:a:moodle:moodle:1.8.3
-
cpe:2.3:a:moodle:moodle:1.8.4
-
cpe:2.3:a:moodle:moodle:1.8.5
-
cpe:2.3:a:moodle:moodle:1.8.6
-
cpe:2.3:a:moodle:moodle:1.8.7
-
cpe:2.3:a:moodle:moodle:1.8.8
-
cpe:2.3:a:moodle:moodle:1.8.9
-
cpe:2.3:a:moodle:moodle:1.9.1
-
cpe:2.3:a:moodle:moodle:1.9.2
-
cpe:2.3:a:moodle:moodle:1.9.3
-
cpe:2.3:a:moodle:moodle:1.9.4
-
cpe:2.3:a:moodle:moodle:1.9.5
-
cpe:2.3:a:moodle:moodle:1.9.6
-
cpe:2.3:a:moodle:moodle:1.9.7