Vulnerability Instance
Lookup for vulnerabilities affecting packages.
GET /api/vulnerabilities/43447?format=api
{ "url": "http://public2.vulnerablecode.io/api/vulnerabilities/43447?format=api", "vulnerability_id": "VCID-vwyj-z4gf-8fg5", "summary": "Improper Authentication\nlogin/token.php in Moodle through 2.3.11, 2.4.x before 2.4.10, 2.5.x before 2.5.6, and 2.6.x before 2.6.3 creates a MoodleMobile web-service token with an infinite lifetime, which makes it easier for remote attackers to hijack sessions via a brute-force attack.", "aliases": [ { "alias": "CVE-2014-0214" }, { "alias": "GHSA-48rq-vj58-2mh6" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/62206?format=api", "purl": "pkg:composer/moodle/moodle@2.4.10", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-h8xn-n98n-qqdv" }, { "vulnerability": "VCID-qxyw-7hnt-hqd6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.4.10" }, { "url": "http://public2.vulnerablecode.io/api/packages/62207?format=api", "purl": "pkg:composer/moodle/moodle@2.5.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-h8xn-n98n-qqdv" }, { "vulnerability": "VCID-qxyw-7hnt-hqd6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.5.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/62208?format=api", "purl": "pkg:composer/moodle/moodle@2.6.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-h8xn-n98n-qqdv" }, { "vulnerability": "VCID-qxyw-7hnt-hqd6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.6.3" } ], "affected_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/62041?format=api", "purl": "pkg:composer/moodle/moodle@2.5.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ehh-qz6c-ykhp" }, { "vulnerability": "VCID-1whm-dsv7-t7gm" }, { "vulnerability": "VCID-4v57-bu85-syhr" }, { "vulnerability": "VCID-4xqt-yugc-qufr" }, { "vulnerability": "VCID-5ru2-1n1f-afa4" }, { "vulnerability": "VCID-6v43-drd7-ufd7" }, { "vulnerability": "VCID-7g7m-bu5q-gbcx" }, { "vulnerability": "VCID-88pw-zwqn-cqfd" }, { "vulnerability": "VCID-cvqm-kjhx-q7ej" }, { "vulnerability": "VCID-czph-uxwr-5uge" }, { "vulnerability": "VCID-ea5s-xphb-6ub7" }, { "vulnerability": "VCID-gdz8-d8j3-nqdh" }, { "vulnerability": "VCID-h8xn-n98n-qqdv" }, { "vulnerability": "VCID-j3t3-svwb-p7bn" }, { "vulnerability": "VCID-q3wv-9hj6-vbgt" }, { "vulnerability": "VCID-qpu2-8paz-7ydv" }, { "vulnerability": "VCID-qxyw-7hnt-hqd6" }, { "vulnerability": "VCID-r88h-mteg-yka9" }, { "vulnerability": "VCID-rdfn-52p2-afa7" }, { "vulnerability": "VCID-s5cy-eva4-wbaf" }, { "vulnerability": "VCID-ucg8-htfc-2bhn" }, { "vulnerability": "VCID-vrfy-36yc-muhr" }, { "vulnerability": "VCID-vs2j-b4qg-nbgu" }, { "vulnerability": "VCID-vwyj-z4gf-8fg5" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.5.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/62042?format=api", "purl": "pkg:composer/moodle/moodle@2.6.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ehh-qz6c-ykhp" }, { "vulnerability": "VCID-1rar-m2g3-27ag" }, { "vulnerability": "VCID-1whm-dsv7-t7gm" }, { "vulnerability": "VCID-29yj-e9bd-queq" }, { "vulnerability": "VCID-3xwm-hqap-8bct" }, { "vulnerability": "VCID-4v57-bu85-syhr" }, { "vulnerability": "VCID-4xqt-yugc-qufr" }, { "vulnerability": "VCID-5c29-qn3p-3yde" }, { "vulnerability": "VCID-5ru2-1n1f-afa4" }, { "vulnerability": "VCID-6v43-drd7-ufd7" }, { "vulnerability": "VCID-7g7m-bu5q-gbcx" }, { "vulnerability": "VCID-7x8g-tdd5-kqbs" }, { "vulnerability": "VCID-88pw-zwqn-cqfd" }, { "vulnerability": "VCID-8q4n-d565-kfbn" }, { "vulnerability": "VCID-bfmx-cwap-8yhp" }, { "vulnerability": "VCID-cvqm-kjhx-q7ej" }, { "vulnerability": "VCID-czph-uxwr-5uge" }, { "vulnerability": "VCID-ea5s-xphb-6ub7" }, { "vulnerability": "VCID-fs9k-21es-rygd" }, { "vulnerability": "VCID-fumj-9pun-zfc5" }, { "vulnerability": "VCID-gdz8-d8j3-nqdh" }, { "vulnerability": "VCID-h8xn-n98n-qqdv" }, { "vulnerability": "VCID-hbky-xx53-vkct" }, { "vulnerability": "VCID-hck4-emsr-q7dc" }, { "vulnerability": "VCID-j3t3-svwb-p7bn" }, { "vulnerability": "VCID-krn6-pwk5-ake2" }, { "vulnerability": "VCID-kzwd-2e6n-fkbm" }, { "vulnerability": "VCID-q3wv-9hj6-vbgt" }, { "vulnerability": "VCID-qpu2-8paz-7ydv" }, { "vulnerability": "VCID-qxyw-7hnt-hqd6" }, { "vulnerability": "VCID-r88h-mteg-yka9" }, { "vulnerability": "VCID-rdfn-52p2-afa7" }, { "vulnerability": "VCID-s5cy-eva4-wbaf" }, { "vulnerability": "VCID-ucg8-htfc-2bhn" }, { "vulnerability": "VCID-uptz-tj66-7yfk" }, { "vulnerability": "VCID-uvgt-7m5a-xkdc" }, { "vulnerability": "VCID-v4qm-48kk-pfaz" }, { "vulnerability": "VCID-v7zm-cw8w-6yf8" }, { "vulnerability": "VCID-vda3-4fgr-gfbw" }, { "vulnerability": "VCID-vrfy-36yc-muhr" }, { "vulnerability": "VCID-vs2j-b4qg-nbgu" }, { "vulnerability": "VCID-vwyj-z4gf-8fg5" }, { "vulnerability": "VCID-xnmk-jah2-ufce" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.6.0" } ], "references": [ { "reference_url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-43119", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-43119" }, { "reference_url": "http://openwall.com/lists/oss-security/2014/05/19/1", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://openwall.com/lists/oss-security/2014/05/19/1" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://github.com/moodle/moodle/commit/14c16a416373f68c36b65f4653c0bd076eb0b290", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/14c16a416373f68c36b65f4653c0bd076eb0b290" }, { "reference_url": "https://github.com/moodle/moodle/commit/437240b5aa7719f1b8cce1e0f45ac0708c72cc23", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/437240b5aa7719f1b8cce1e0f45ac0708c72cc23" }, { "reference_url": "https://github.com/moodle/moodle/commit/679e323aaab2a968b8e87862e1658814645db525", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/679e323aaab2a968b8e87862e1658814645db525" }, { "reference_url": "https://github.com/moodle/moodle/commit/b5b2eab6778bee166e20bc5eec0138d89795ac3d", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/b5b2eab6778bee166e20bc5eec0138d89795ac3d" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=260362", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=260362" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0214", "reference_id": "CVE-2014-0214", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0214" }, { "reference_url": "https://github.com/advisories/GHSA-48rq-vj58-2mh6", "reference_id": "GHSA-48rq-vj58-2mh6", "reference_type": "", "scores": [], "url": "https://github.com/advisories/GHSA-48rq-vj58-2mh6" } ], "weaknesses": [ { "cwe_id": 1035, "name": "OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities", "description": "Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017." }, { "cwe_id": 287, "name": "Improper Authentication", "description": "When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct." }, { "cwe_id": 937, "name": "OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities", "description": "Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013." } ], "exploits": [], "severity_range_score": "4.0 - 6.9", "exploitability": null, "weighted_severity": null, "risk_score": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-vwyj-z4gf-8fg5" }