login/index_form.html in Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 links to an index page on the HTTP port even when the page is served from an HTTPS port, which might cause login credentials to be sent in cleartext, even when SSL is intended, and allows remote attackers to obtain these credentials by sniffing.
| Type | CWE ID | Description |
|---|---|---|
| text | N/A | n/a |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Hyperlink | Resource |
|---|---|
| http://moodle.org/mod/forum/discuss.php?d=139107 | x_refsource_CONFIRM |
| http://docs.moodle.org/en/Moodle_1.9.7_release_notes | x_refsource_CONFIRM |
| http://docs.moodle.org/en/Moodle_1.8.11_release_notes | x_refsource_CONFIRM |
| http://www.vupen.com/english/advisories/2009/3455 | vdb-entry x_refsource_VUPEN |
| http://secunia.com/advisories/37614 | third-party-advisory x_refsource_SECUNIA |
| https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00730.html | vendor-advisory x_refsource_FEDORA |
| https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00704.html | vendor-advisory x_refsource_FEDORA |
| https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00751.html | vendor-advisory x_refsource_FEDORA |
| http://www.securityfocus.com/bid/37244 | vdb-entry x_refsource_BID |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Hyperlink | Resource |
|---|---|
| http://moodle.org/mod/forum/discuss.php?d=139107 | x_refsource_CONFIRM x_transferred |
| http://docs.moodle.org/en/Moodle_1.9.7_release_notes | x_refsource_CONFIRM x_transferred |
| http://docs.moodle.org/en/Moodle_1.8.11_release_notes | x_refsource_CONFIRM x_transferred |
| http://www.vupen.com/english/advisories/2009/3455 | vdb-entry x_refsource_VUPEN x_transferred |
| http://secunia.com/advisories/37614 | third-party-advisory x_refsource_SECUNIA x_transferred |
| https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00730.html | vendor-advisory x_refsource_FEDORA x_transferred |
| https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00704.html | vendor-advisory x_refsource_FEDORA x_transferred |
| https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00751.html | vendor-advisory x_refsource_FEDORA x_transferred |
| http://www.securityfocus.com/bid/37244 | vdb-entry x_refsource_BID x_transferred |