CVE-2025-62398: Moodle: possible to bypass mfa
A serious authentication flaw allowed attackers with valid credentials to bypass multi-factor authentication under certain conditions, potentially compromising user accounts.
Other sources
Certain login endpoints were improperly validated for MFA enforcement, allowing users with valid username and password combinations to log in without completing second-factor authentication. This exposes affected accounts to unauthorized access.
Versions affected: 5.0 to 5.0.2, 4.5 to 4.5.6 and 4.4 to 4.4.10 Versions fixed: 5.0.3, 4.5.7 and 4.4.11
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-62398?
CVE-2025-62398 is classified as a critical severity vulnerability due to its potential to allow unauthorized access to user accounts.
How do I fix CVE-2025-62398?
To fix CVE-2025-62398, update your Moodle software to the latest version that addresses this authentication flaw.
What are the potential impacts of CVE-2025-62398?
The potential impacts of CVE-2025-62398 include unauthorized access and compromise of user accounts due to bypassing multi-factor authentication.
Who is affected by CVE-2025-62398?
CVE-2025-62398 affects users of Moodle who utilize multi-factor authentication in their authentication process.
Is CVE-2025-62398 actively being exploited?
As of the latest information, there is no confirmed active exploitation of CVE-2025-62398, but it poses a significant risk to affected systems.