CVE-2010-1613
First published: Thu Apr 29 2010(Updated: )
Moodle 1.8.x and 1.9.x before 1.9.8 does not enable the "Regenerate session id during login" setting by default, which makes it easier for remote attackers to conduct session fixation attacks.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Moodle | =1.9.4 | |
| Moodle | =1.9.1 | |
| Moodle | =1.8.8 | |
| Moodle | =1.9.6 | |
| Moodle | =1.8.2 | |
| Moodle | =1.9.2 | |
| Moodle | =1.8.6 | |
| Moodle | =1.8.5 | |
| Moodle | =1.8.3 | |
| Moodle | =1.8.9 | |
| Moodle | =1.8.7 | |
| Moodle | =1.8.10 | |
| Moodle | =1.9.3 | |
| Moodle | =1.9.5 | |
| Moodle | =1.8.11 | |
| Moodle | =1.8.4 | |
| Moodle | =1.8.1 | |
| Moodle | =1.9.7 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2010-1613?
CVE-2010-1613 is categorized as a medium severity vulnerability.
How do I fix CVE-2010-1613?
To fix CVE-2010-1613, ensure that the 'Regenerate session id during login' setting is enabled in your Moodle configuration.
Which versions of Moodle are affected by CVE-2010-1613?
Moodle versions 1.8.x and 1.9.x prior to 1.9.8 are affected by CVE-2010-1613.
What type of attack is associated with CVE-2010-1613?
CVE-2010-1613 is associated with session fixation attacks, which can compromise user sessions.
Is there a patch available for CVE-2010-1613?
Yes, a patch is included in Moodle version 1.9.8 and later, addressing CVE-2010-1613.
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/last-modified-date
- agent/references
- agent/weakness
- agent/author
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/moodle
- canonical/moodle
- version/moodle/1.9.4
- version/moodle/1.9.1
- version/moodle/1.8.8
- version/moodle/1.9.6
- version/moodle/1.8.2
- version/moodle/1.9.2
- version/moodle/1.8.6
- version/moodle/1.8.5
- version/moodle/1.8.3
- version/moodle/1.8.9
- version/moodle/1.8.7
- version/moodle/1.8.10
- version/moodle/1.9.3
- version/moodle/1.9.5
- version/moodle/1.8.11
- version/moodle/1.8.4
- version/moodle/1.8.1
- version/moodle/1.9.7