Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Moodle Improper Authentication Vulnerability - CVE-2014-3552 - Vulnerability Database
Moodle

Moodle Improper Authentication Vulnerability - CVE-2014-3552

Medium
Reference: CVE-2014-3552
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2014-3552
Title: Moodle Improper Authentication Vulnerability
Overview:

The Shibboleth authentication plugin in auth/shibboleth/index.php in Moodle through 2.3.11 2.4.x before 2.4.11 and 2.5.x before 2.5.7 does not check whether a session ID is empty which allows remote authenticated users to hijack sessions via crafted plugin interaction.