{"id":"CVE-2015-3179","aliases":[],"url":"https://o3.security/vulnerability/CVE-2015-3179","summary":"Moodle allows attackers to bypass intended login restrictions","details":"login/confirm.php in Moodle through 2.5.9, 2.6.x before 2.6.11, 2.7.x before 2.7.8, and 2.8.x before 2.8.6 allows remote authenticated users to bypass intended login restrictions by leveraging access to an unconfirmed suspended account.","published":"2022-05-13T01:12:45Z","modified":"2024-12-08T05:31:25.293130Z","cvss":null,"epss":null,"cisaKev":null,"exploitsKnown":0,"affectedPackages":[{"ecosystem":"Packagist","name":"moodle/moodle","fixedVersion":"2.6.11"},{"ecosystem":"Packagist","name":"moodle/moodle","fixedVersion":"2.7.8"},{"ecosystem":"Packagist","name":"moodle/moodle","fixedVersion":"2.8.6"}],"fix":{"url":"https://github.com/moodle/moodle/commit/78ec6751fc57bb17bb67c26870fea396390b9937","label":"moodle/moodle@78ec675"},"references":[{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2015-3179"},{"type":"WEB","url":"https://github.com/moodle/moodle/commit/78ec6751fc57bb17bb67c26870fea396390b9937"},{"type":"WEB","url":"https://github.com/moodle/moodle/commit/811ae9f082697495248c6c87ec80aeaf88c851fc"},{"type":"WEB","url":"https://github.com/moodle/moodle/commit/98c38993fd6cbd78bf5819c68c55fcfded6467c0"},{"type":"WEB","url":"https://github.com/moodle/moodle/commit/f236dcc35c3595dfcc77932d84660056e982a310"},{"type":"PACKAGE","url":"https://github.com/moodle/moodle"},{"type":"WEB","url":"https://moodle.org/mod/forum/discuss.php?d=313686"},{"type":"WEB","url":"https://web.archive.org/web/20200228054915/http://www.securityfocus.com/bid/74725"},{"type":"WEB","url":"https://web.archive.org/web/20200501000000*/http://www.securitytracker.com/id/1032358"},{"type":"WEB","url":"http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-50090"},{"type":"WEB","url":"http://openwall.com/lists/oss-security/2015/05/18/1"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2024-12-08T05:31:25.293130Z"}}