CVE-2010-1613: Medium severity Moodle moodle vulnerability
Published Apr 29, 2010
·Updated
Moodle 1.8.x and 1.9.x before 1.9.8 does not enable the "Regenerate session id during login" setting by default, which makes it easier for remote attackers to conduct session fixation attacks.
Affected Software
19 affected componentsFixes available
Moodle moodle=1.8.1
Moodle moodle=1.8.2
Moodle moodle=1.8.3
Moodle moodle=1.8.4
Moodle moodle=1.8.5
Moodle moodle=1.8.6
Moodle moodle=1.8.7
Moodle moodle=1.8.8
Moodle moodle=1.8.9
Moodle moodle=1.8.10
Moodle moodle=1.8.11
Moodle moodle=1.9.1
Moodle moodle=1.9.2
Moodle moodle=1.9.3
Moodle moodle=1.9.4
Moodle moodle=1.9.5
Moodle moodle=1.9.6
Moodle moodle=1.9.7
composer/moodle/moodle>=1.8.0<1.9.8
1.9.8
Event History
Apr 29, 2010
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
Data Sourced
via NVD·09:30 PM
DescriptionSeverityWeaknessAffected Software
May 13, 2022
Advisory Published
via GitHub·01:13 AM
Frequently Asked Questions
1
What is the severity of CVE-2010-1613?
CVE-2010-1613 is categorized as a medium severity vulnerability.
2
How do I fix CVE-2010-1613?
To fix CVE-2010-1613, ensure that the 'Regenerate session id during login' setting is enabled in your Moodle configuration.
3
Which versions of Moodle are affected by CVE-2010-1613?
Moodle versions 1.8.x and 1.9.x prior to 1.9.8 are affected by CVE-2010-1613.
4
What type of attack is associated with CVE-2010-1613?
CVE-2010-1613 is associated with session fixation attacks, which can compromise user sessions.
5
Is there a patch available for CVE-2010-1613?
Yes, a patch is included in Moodle version 1.9.8 and later, addressing CVE-2010-1613.