Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-g4hn-yz26-1beb
Vulnerability ID VCID-g4hn-yz26-1beb
Aliases CVE-2015-3179
GHSA-4ppg-2mx6-fqx9
Summary Moodle allows attackers to bypass intended login restrictions login/confirm.php in Moodle through 2.5.9, 2.6.x before 2.6.11, 2.7.x before 2.7.8, and 2.8.x before 2.8.6 allows remote authenticated users to bypass intended login restrictions by leveraging access to an unconfirmed suspended account.
Status Published
Exploitability None
Weighted Severity None
Risk None
Affected and Fixed Packages Package Details
Weaknesses (3)
CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
CWE-264 Permissions, Privileges, and Access Controls
CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
System Score Found at
There are no known severity scores.
Reference id Reference type URL
http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-50090
http://openwall.com/lists/oss-security/2015/05/18/1
https://github.com/moodle/moodle/commit/78ec6751fc57bb17bb67c26870fea396390b9937
https://github.com/moodle/moodle/commit/811ae9f082697495248c6c87ec80aeaf88c851fc
https://github.com/moodle/moodle/commit/98c38993fd6cbd78bf5819c68c55fcfded6467c0
https://github.com/moodle/moodle/commit/f236dcc35c3595dfcc77932d84660056e982a310
https://moodle.org/mod/forum/discuss.php?d=313686
https://web.archive.org/web/20200228054915/http://www.securityfocus.com/bid/74725
https://web.archive.org/web/20200501000000*/http://www.securitytracker.com/id/1032358
CVE-2015-3179 https://nvd.nist.gov/vuln/detail/CVE-2015-3179
GHSA-4ppg-2mx6-fqx9 https://github.com/advisories/GHSA-4ppg-2mx6-fqx9
No exploits are available.
There are no known vectors.

No EPSS data available for this vulnerability.

Date Actor Action Source VulnerableCode Version
2026-06-02T04:43:04.671041+00:00 GitLab Importer Import https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/moodle/moodle/CVE-2015-3179.yml 38.6.0