Description
Moodle’s mobile and web service authentication endpoints did not sufficiently restrict repeated password attempts, making them susceptible to brute-force attacks.
Remediation
References
Related Vulnerabilities
Oracle HTTP Server Other Vulnerability (CVE-2007-0279)
WordPress Plugin WP e-Commerce-Store Toolkit Privilege Escalation (2.0)
PHP Other Vulnerability (CVE-2005-3391)
WordPress Plugin Walk Score Multiple Cross-Site Scripting Vulnerabilities (0.5.5)
MySQL Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-10268)