CVE-2024-45691
CVSS 3.1 Score 5.4 of 10 (medium)
Details
Published Nov 20, 2024
Updated: Nov 21, 2024
Summary
CVE-2024-45691 is a vulnerability affecting the Moodle learning management system. This issue arises due to weak password comparison logic when restricting access to a lesson activity using a password. Specifically, certain "magic hash" value passwords can be bypassed or made less secure, posing a risk to unauthorized access. The vulnerability does not impact all passwords, but only those set to specific "magic hash" values. This flaw could potentially allow unauthorized users to gain access to restricted lesson activities.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.