CVE-2024-38277
Published: 18 June 2024
A unique key should be generated for a user's QR login key and their auto-login key, so the same key cannot be used interchangeably between the two.
Priority
Status
| Package | Release | Status |
|---|---|---|
|
moodle
Launchpad, Ubuntu, Debian |
bionic |
Not vulnerable
(code not present)
|
| focal |
Does not exist
|
|
| jammy |
Does not exist
|
|
| mantic |
Does not exist
|
|
| noble |
Does not exist
|
|
| upstream |
Released
(4.4.1, 4.3.5, 4.2.8, 4.1.11)
|
|
| xenial |
Not vulnerable
(code not present)
|
|
|
Patches:
upstream: https://git.moodle.org/gw?p=moodle.git;a=commit;h=36e0395bb95268271b5a116cf293faf836f9b299 |
||