CVE-2024-45691 — Moodle: lesson activity password bypass through php loose comparison

CVE-2024-45691

Moodle: lesson activity password bypass through php loose comparison PUBLISHED

Description (CNA)

A flaw was found in Moodle. When restricting access to a lesson activity with a password, certain passwords could be bypassed or less secure due to a loose comparison in the password-checking logic. This issue only affected passwords set to "magic hash" values.

Affected (CNA)

Vendor / product	Versions
Not supplied / Not supplied	affected 0 before 4.1.13; affected 4.2 before 4.2.10; affected 4.3 before 4.3.7; affected 4.4 before 4.4.3

CWE

No CWE identifiers supplied.

References

https://bugzilla.redhat.com/show_bug.cgi?id=2309940
https://moodle.org/security/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.