login/confirm.php in Moodle through 2.5.9, 2.6.x before 2.6.11, 2.7.x before 2.7.8, and 2.8.x before 2.8.6 allows remote authenticated users to bypass intended login restrictions by leveraging access to an unconfirmed suspended account.
References
Configurations
Configuration 1 (hide)
|
Information
Published : 2015-06-01 12:59
Updated : 2020-12-01 06:54
NVD link : CVE-2015-3179
Mitre link : CVE-2015-3179
JSON object : View
CWE
CWE-264
Permissions, Privileges, and Access Controls
Products Affected
moodle
- moodle