Description
A flaw was found in Moodle. When restricting access to a lesson activity with a password, certain passwords could be bypassed or less secure due to a loose comparison in the password-checking logic. This issue only affected passwords set to "magic hash" values.
Remediation
References
Related Vulnerabilities
phpMyAdmin Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-4987)
WordPress Plugin Best Image Gallery & Responsive Photo Gallery-FooGallery Security Bypass (1.6.15)
PHP Other Vulnerability (CVE-2005-3883)
WordPress Plugin Pricing Table by Supsystic Multiple Vulnerabilities (1.8.1)
Ruby on Rails URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2021-22942)