CVE-2014-0214

CVE Descriptions

login/token.php in Moodle through 2.3.11, 2.4.x before 2.4.10, 2.5.x before 2.5.6, and 2.6.x before 2.6.3 creates a MoodleMobile web-service token with an infinite lifetime, which makes it easier for remote attackers to hijack sessions via a brute-force attack.

CVE Informations

Related Weaknesses

CWE-ID	Weakness Name	Source
CWE-287	Improper Authentication When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

Metrics

Metrics	Score	Severity	CVSS Vector	Source
V2	6.8		AV:N/AC:M/Au:N/C:P/I:P/A:P	nvd@nist.gov

EPSS

EPSS is a scoring model that predicts the likelihood of a vulnerability being exploited.

EPSS Score

The EPSS model produces a probability score between 0 and 1 (0 and 100%). The higher the score, the greater the probability that a vulnerability will be exploited.

Date	EPSS V0	EPSS V1	EPSS V2 (> 2022-02-04)	EPSS V3 (> 2025-03-07)	EPSS V4 (> 2025-03-17)
2022-02-06	–	–	1.14%	–	–
2022-02-13	–	–	1.14%	–	–
2022-04-03	–	–	1.14%	–	–
2022-04-24	–	–	1.14%	–	–
2022-07-17	–	–	1.14%	–	–
2022-11-13	–	–	1.14%	–	–
2022-11-20	–	–	1.14%	–	–
2022-12-04	–	–	1.14%	–	–
2023-03-12	–	–	–	0.72%	–
2024-01-21	–	–	–	0.72%	–
2024-02-11	–	–	–	0.72%	–
2024-06-02	–	–	–	0.72%	–
2024-12-22	–	–	–	0.62%	–
2025-01-19	–	–	–	0.62%	–
2025-03-18	–	–	–	–	0.7%
2025-03-30	–	–	–	–	0.47%
2025-04-06	–	–	–	–	0.41%
2025-04-08	–	–	–	–	0.47%
2025-04-09	–	–	–	–	0.41%
2025-04-10	–	–	–	–	0.47%
2025-04-15	–	–	–	–	0.47%
2025-04-15	–	–	–	–	0.47,%

EPSS Percentile

The percentile is used to rank CVE according to their EPSS score. For example, a CVE in the 95th percentile according to its EPSS score is more likely to be exploited than 95% of other CVE. Thus, the percentile is used to compare the EPSS score of a CVE with that of other CVE.

EPSS First.org

Date	Percentile
2022-02-06	34%
2022-02-13	35%
2022-04-03	56%
2022-04-24	57%
2022-07-17	58%
2022-11-13	59%
2022-11-20	58%
2022-12-04	59%
2023-03-12	78%
2024-01-21	79%
2024-02-11	8%
2024-06-02	81%
2024-12-22	79%
2025-01-19	79%
2025-03-18	7%
2025-03-30	62%
2025-04-06	59%
2025-04-08	62%
2025-04-09	59%
2025-04-10	62%
2025-04-15	63%
2025-04-15	63%

Products Mentioned

Configuraton 0

Moodle>>Moodle >> Version To (including) 2.3.11

Moodle>>Moodle >> Version - (Open CPE detail)
Moodle>>Moodle >> Version 1.1.1 (Open CPE detail)
Moodle>>Moodle >> Version 1.2 (Open CPE detail)
Moodle>>Moodle >> Version 1.2.0 (Open CPE detail)
Moodle>>Moodle >> Version 1.2.1 (Open CPE detail)
Moodle>>Moodle >> Version 1.3 (Open CPE detail)
Moodle>>Moodle >> Version 1.3.0 (Open CPE detail)
Moodle>>Moodle >> Version 1.3.1 (Open CPE detail)
Moodle>>Moodle >> Version 1.3.2 (Open CPE detail)
Moodle>>Moodle >> Version 1.3.3 (Open CPE detail)
Moodle>>Moodle >> Version 1.3.4 (Open CPE detail)
Moodle>>Moodle >> Version 1.3.5 (Open CPE detail)
Moodle>>Moodle >> Version 1.4.0 (Open CPE detail)
Moodle>>Moodle >> Version 1.4.1 (Open CPE detail)
Moodle>>Moodle >> Version 1.4.2 (Open CPE detail)
Moodle>>Moodle >> Version 1.4.3 (Open CPE detail)
Moodle>>Moodle >> Version 1.4.4 (Open CPE detail)
Moodle>>Moodle >> Version 1.4.5 (Open CPE detail)
Moodle>>Moodle >> Version 1.5 (Open CPE detail)
Moodle>>Moodle >> Version 1.5 (Open CPE detail)
Moodle>>Moodle >> Version 1.5 (Open CPE detail)
Moodle>>Moodle >> Version 1.5.0 (Open CPE detail)
Moodle>>Moodle >> Version 1.5.0 (Open CPE detail)
Moodle>>Moodle >> Version 1.5.1 (Open CPE detail)
Moodle>>Moodle >> Version 1.5.2 (Open CPE detail)
Moodle>>Moodle >> Version 1.5.3 (Open CPE detail)
Moodle>>Moodle >> Version 1.5.4 (Open CPE detail)
Moodle>>Moodle >> Version 1.6 (Open CPE detail)
Moodle>>Moodle >> Version 1.6.0 (Open CPE detail)
Moodle>>Moodle >> Version 1.6.1 (Open CPE detail)
Moodle>>Moodle >> Version 1.6.2 (Open CPE detail)
Moodle>>Moodle >> Version 1.6.3 (Open CPE detail)
Moodle>>Moodle >> Version 1.6.4 (Open CPE detail)
Moodle>>Moodle >> Version 1.6.5 (Open CPE detail)
Moodle>>Moodle >> Version 1.6.6 (Open CPE detail)
Moodle>>Moodle >> Version 1.6.7 (Open CPE detail)
Moodle>>Moodle >> Version 1.6.8 (Open CPE detail)
Moodle>>Moodle >> Version 1.6.9 (Open CPE detail)
Moodle>>Moodle >> Version 1.7 (Open CPE detail)
Moodle>>Moodle >> Version 1.7.0 (Open CPE detail)
Moodle>>Moodle >> Version 1.7.1 (Open CPE detail)
Moodle>>Moodle >> Version 1.7.2 (Open CPE detail)
Moodle>>Moodle >> Version 1.7.3 (Open CPE detail)
Moodle>>Moodle >> Version 1.7.4 (Open CPE detail)
Moodle>>Moodle >> Version 1.7.5 (Open CPE detail)
Moodle>>Moodle >> Version 1.7.6 (Open CPE detail)
Moodle>>Moodle >> Version 1.7.7 (Open CPE detail)
Moodle>>Moodle >> Version 1.8 (Open CPE detail)
Moodle>>Moodle >> Version 1.8.0 (Open CPE detail)
Moodle>>Moodle >> Version 1.8.1 (Open CPE detail)
Moodle>>Moodle >> Version 1.8.2 (Open CPE detail)
Moodle>>Moodle >> Version 1.8.3 (Open CPE detail)
Moodle>>Moodle >> Version 1.8.4 (Open CPE detail)
Moodle>>Moodle >> Version 1.8.5 (Open CPE detail)
Moodle>>Moodle >> Version 1.8.6 (Open CPE detail)
Moodle>>Moodle >> Version 1.8.7 (Open CPE detail)
Moodle>>Moodle >> Version 1.8.8 (Open CPE detail)
Moodle>>Moodle >> Version 1.8.9 (Open CPE detail)
Moodle>>Moodle >> Version 1.8.10 (Open CPE detail)
Moodle>>Moodle >> Version 1.8.11 (Open CPE detail)
Moodle>>Moodle >> Version 1.8.12 (Open CPE detail)
Moodle>>Moodle >> Version 1.8.13 (Open CPE detail)
Moodle>>Moodle >> Version 1.8.14 (Open CPE detail)
Moodle>>Moodle >> Version 1.9 (Open CPE detail)
Moodle>>Moodle >> Version 1.9.0 (Open CPE detail)
Moodle>>Moodle >> Version 1.9.1 (Open CPE detail)
Moodle>>Moodle >> Version 1.9.2 (Open CPE detail)
Moodle>>Moodle >> Version 1.9.3 (Open CPE detail)
Moodle>>Moodle >> Version 1.9.4 (Open CPE detail)
Moodle>>Moodle >> Version 1.9.5 (Open CPE detail)
Moodle>>Moodle >> Version 1.9.6 (Open CPE detail)
Moodle>>Moodle >> Version 1.9.7 (Open CPE detail)
Moodle>>Moodle >> Version 1.9.8 (Open CPE detail)
Moodle>>Moodle >> Version 1.9.9 (Open CPE detail)
Moodle>>Moodle >> Version 1.9.10 (Open CPE detail)
Moodle>>Moodle >> Version 1.9.11 (Open CPE detail)
Moodle>>Moodle >> Version 1.9.12 (Open CPE detail)
Moodle>>Moodle >> Version 1.9.13 (Open CPE detail)
Moodle>>Moodle >> Version 1.9.14 (Open CPE detail)
Moodle>>Moodle >> Version 1.9.15 (Open CPE detail)
Moodle>>Moodle >> Version 1.9.16 (Open CPE detail)
Moodle>>Moodle >> Version 1.9.17 (Open CPE detail)
Moodle>>Moodle >> Version 1.9.18 (Open CPE detail)
Moodle>>Moodle >> Version 1.9.19 (Open CPE detail)
Moodle>>Moodle >> Version 2.0 (Open CPE detail)
Moodle>>Moodle >> Version 2.0.0 (Open CPE detail)
Moodle>>Moodle >> Version 2.0.1 (Open CPE detail)
Moodle>>Moodle >> Version 2.0.2 (Open CPE detail)
Moodle>>Moodle >> Version 2.0.3 (Open CPE detail)
Moodle>>Moodle >> Version 2.0.4 (Open CPE detail)
Moodle>>Moodle >> Version 2.0.5 (Open CPE detail)
Moodle>>Moodle >> Version 2.0.6 (Open CPE detail)
Moodle>>Moodle >> Version 2.0.7 (Open CPE detail)
Moodle>>Moodle >> Version 2.0.8 (Open CPE detail)
Moodle>>Moodle >> Version 2.0.9 (Open CPE detail)
Moodle>>Moodle >> Version 2.0.10 (Open CPE detail)
Moodle>>Moodle >> Version 2.1 (Open CPE detail)
Moodle>>Moodle >> Version 2.1.0 (Open CPE detail)
Moodle>>Moodle >> Version 2.1.1 (Open CPE detail)
Moodle>>Moodle >> Version 2.1.2 (Open CPE detail)
Moodle>>Moodle >> Version 2.1.3 (Open CPE detail)
Moodle>>Moodle >> Version 2.1.4 (Open CPE detail)
Moodle>>Moodle >> Version 2.1.5 (Open CPE detail)
Moodle>>Moodle >> Version 2.1.6 (Open CPE detail)
Moodle>>Moodle >> Version 2.1.7 (Open CPE detail)
Moodle>>Moodle >> Version 2.1.8 (Open CPE detail)
Moodle>>Moodle >> Version 2.1.9 (Open CPE detail)
Moodle>>Moodle >> Version 2.1.10 (Open CPE detail)
Moodle>>Moodle >> Version 2.2 (Open CPE detail)
Moodle>>Moodle >> Version 2.2.0 (Open CPE detail)
Moodle>>Moodle >> Version 2.2.1 (Open CPE detail)
Moodle>>Moodle >> Version 2.2.2 (Open CPE detail)
Moodle>>Moodle >> Version 2.2.3 (Open CPE detail)
Moodle>>Moodle >> Version 2.2.4 (Open CPE detail)
Moodle>>Moodle >> Version 2.2.5 (Open CPE detail)
Moodle>>Moodle >> Version 2.2.6 (Open CPE detail)
Moodle>>Moodle >> Version 2.2.7 (Open CPE detail)
Moodle>>Moodle >> Version 2.2.8 (Open CPE detail)
Moodle>>Moodle >> Version 2.2.9 (Open CPE detail)
Moodle>>Moodle >> Version 2.2.10 (Open CPE detail)
Moodle>>Moodle >> Version 2.2.11 (Open CPE detail)
Moodle>>Moodle >> Version 2.3 (Open CPE detail)
Moodle>>Moodle >> Version 2.3.0 (Open CPE detail)
Moodle>>Moodle >> Version 2.3.1 (Open CPE detail)
Moodle>>Moodle >> Version 2.3.2 (Open CPE detail)
Moodle>>Moodle >> Version 2.3.3 (Open CPE detail)
Moodle>>Moodle >> Version 2.3.4 (Open CPE detail)
Moodle>>Moodle >> Version 2.3.5 (Open CPE detail)
Moodle>>Moodle >> Version 2.3.6 (Open CPE detail)
Moodle>>Moodle >> Version 2.3.7 (Open CPE detail)
Moodle>>Moodle >> Version 2.3.8 (Open CPE detail)
Moodle>>Moodle >> Version 2.3.9 (Open CPE detail)
Moodle>>Moodle >> Version 2.3.10 (Open CPE detail)
Moodle>>Moodle >> Version 2.3.11 (Open CPE detail)

Moodle>>Moodle >> Version 2.0.0

Moodle>>Moodle >> Version 2.0.0 (Open CPE detail)

Moodle>>Moodle >> Version 2.0.1

Moodle>>Moodle >> Version 2.0.1 (Open CPE detail)

Moodle>>Moodle >> Version 2.0.2

Moodle>>Moodle >> Version 2.0.2 (Open CPE detail)

Moodle>>Moodle >> Version 2.0.3

Moodle>>Moodle >> Version 2.0.3 (Open CPE detail)

Moodle>>Moodle >> Version 2.0.4

Moodle>>Moodle >> Version 2.0.4 (Open CPE detail)

Moodle>>Moodle >> Version 2.0.5

Moodle>>Moodle >> Version 2.0.5 (Open CPE detail)

Moodle>>Moodle >> Version 2.0.6

Moodle>>Moodle >> Version 2.0.6 (Open CPE detail)

Moodle>>Moodle >> Version 2.0.7

Moodle>>Moodle >> Version 2.0.7 (Open CPE detail)

Moodle>>Moodle >> Version 2.0.8

Moodle>>Moodle >> Version 2.0.8 (Open CPE detail)

Moodle>>Moodle >> Version 2.0.9

Moodle>>Moodle >> Version 2.0.9 (Open CPE detail)

Moodle>>Moodle >> Version 2.1.0

Moodle>>Moodle >> Version 2.1.0 (Open CPE detail)

Moodle>>Moodle >> Version 2.1.1

Moodle>>Moodle >> Version 2.1.1 (Open CPE detail)

Moodle>>Moodle >> Version 2.1.2

Moodle>>Moodle >> Version 2.1.2 (Open CPE detail)

Moodle>>Moodle >> Version 2.1.3

Moodle>>Moodle >> Version 2.1.3 (Open CPE detail)

Moodle>>Moodle >> Version 2.1.4

Moodle>>Moodle >> Version 2.1.4 (Open CPE detail)

Moodle>>Moodle >> Version 2.1.5

Moodle>>Moodle >> Version 2.1.5 (Open CPE detail)

Moodle>>Moodle >> Version 2.1.6

Moodle>>Moodle >> Version 2.1.6 (Open CPE detail)

Moodle>>Moodle >> Version 2.1.7

Moodle>>Moodle >> Version 2.1.7 (Open CPE detail)

Moodle>>Moodle >> Version 2.1.8

Moodle>>Moodle >> Version 2.1.8 (Open CPE detail)

Moodle>>Moodle >> Version 2.1.9

Moodle>>Moodle >> Version 2.1.9 (Open CPE detail)

Moodle>>Moodle >> Version 2.1.10

Moodle>>Moodle >> Version 2.1.10 (Open CPE detail)

Moodle>>Moodle >> Version 2.2.0

Moodle>>Moodle >> Version 2.2.0 (Open CPE detail)

Moodle>>Moodle >> Version 2.2.1

Moodle>>Moodle >> Version 2.2.1 (Open CPE detail)

Moodle>>Moodle >> Version 2.2.2

Moodle>>Moodle >> Version 2.2.2 (Open CPE detail)

Moodle>>Moodle >> Version 2.2.3

Moodle>>Moodle >> Version 2.2.3 (Open CPE detail)

Moodle>>Moodle >> Version 2.2.4

Moodle>>Moodle >> Version 2.2.4 (Open CPE detail)

Moodle>>Moodle >> Version 2.2.5

Moodle>>Moodle >> Version 2.2.5 (Open CPE detail)

Moodle>>Moodle >> Version 2.2.6

Moodle>>Moodle >> Version 2.2.6 (Open CPE detail)

Moodle>>Moodle >> Version 2.2.7

Moodle>>Moodle >> Version 2.2.7 (Open CPE detail)

Moodle>>Moodle >> Version 2.2.8

Moodle>>Moodle >> Version 2.2.8 (Open CPE detail)

Moodle>>Moodle >> Version 2.2.9

Moodle>>Moodle >> Version 2.2.9 (Open CPE detail)

Moodle>>Moodle >> Version 2.2.10

Moodle>>Moodle >> Version 2.2.10 (Open CPE detail)

Moodle>>Moodle >> Version 2.2.11

Moodle>>Moodle >> Version 2.2.11 (Open CPE detail)

Moodle>>Moodle >> Version 2.3.0

Moodle>>Moodle >> Version 2.3.0 (Open CPE detail)

Moodle>>Moodle >> Version 2.3.1

Moodle>>Moodle >> Version 2.3.1 (Open CPE detail)

Moodle>>Moodle >> Version 2.3.2

Moodle>>Moodle >> Version 2.3.2 (Open CPE detail)

Moodle>>Moodle >> Version 2.3.3

Moodle>>Moodle >> Version 2.3.3 (Open CPE detail)

Moodle>>Moodle >> Version 2.3.4

Moodle>>Moodle >> Version 2.3.4 (Open CPE detail)

Moodle>>Moodle >> Version 2.3.5

Moodle>>Moodle >> Version 2.3.5 (Open CPE detail)

Moodle>>Moodle >> Version 2.3.6

Moodle>>Moodle >> Version 2.3.6 (Open CPE detail)

Moodle>>Moodle >> Version 2.3.7

Moodle>>Moodle >> Version 2.3.7 (Open CPE detail)

Moodle>>Moodle >> Version 2.3.8

Moodle>>Moodle >> Version 2.3.8 (Open CPE detail)

Moodle>>Moodle >> Version 2.3.9

Moodle>>Moodle >> Version 2.3.9 (Open CPE detail)

Moodle>>Moodle >> Version 2.3.10

Moodle>>Moodle >> Version 2.3.10 (Open CPE detail)

Moodle>>Moodle >> Version 2.4.0

Moodle>>Moodle >> Version 2.4.0 (Open CPE detail)

Moodle>>Moodle >> Version 2.4.1

Moodle>>Moodle >> Version 2.4.1 (Open CPE detail)

Moodle>>Moodle >> Version 2.4.2

Moodle>>Moodle >> Version 2.4.2 (Open CPE detail)

Moodle>>Moodle >> Version 2.4.3

Moodle>>Moodle >> Version 2.4.3 (Open CPE detail)

Moodle>>Moodle >> Version 2.4.4

Moodle>>Moodle >> Version 2.4.4 (Open CPE detail)

Moodle>>Moodle >> Version 2.4.5

Moodle>>Moodle >> Version 2.4.5 (Open CPE detail)

Moodle>>Moodle >> Version 2.4.6

Moodle>>Moodle >> Version 2.4.6 (Open CPE detail)

Moodle>>Moodle >> Version 2.4.7

Moodle>>Moodle >> Version 2.4.7 (Open CPE detail)

Moodle>>Moodle >> Version 2.4.8

Moodle>>Moodle >> Version 2.4.8 (Open CPE detail)

Moodle>>Moodle >> Version 2.4.9

Moodle>>Moodle >> Version 2.4.9 (Open CPE detail)

Moodle>>Moodle >> Version 2.5.0

Moodle>>Moodle >> Version 2.5.0 (Open CPE detail)

Moodle>>Moodle >> Version 2.5.1

Moodle>>Moodle >> Version 2.5.1 (Open CPE detail)

Moodle>>Moodle >> Version 2.5.2

Moodle>>Moodle >> Version 2.5.2 (Open CPE detail)

Moodle>>Moodle >> Version 2.5.3

Moodle>>Moodle >> Version 2.5.3 (Open CPE detail)

Moodle>>Moodle >> Version 2.5.4

Moodle>>Moodle >> Version 2.5.4 (Open CPE detail)

Moodle>>Moodle >> Version 2.5.5

Moodle>>Moodle >> Version 2.5.5 (Open CPE detail)

Moodle>>Moodle >> Version 2.6.0

Moodle>>Moodle >> Version 2.6.0 (Open CPE detail)

Moodle>>Moodle >> Version 2.6.1

Moodle>>Moodle >> Version 2.6.1 (Open CPE detail)

Moodle>>Moodle >> Version 2.6.2

Moodle>>Moodle >> Version 2.6.2 (Open CPE detail)

References

http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-43119
Tags : x_refsource_CONFIRM

http://openwall.com/lists/oss-security/2014/05/19/1
Tags : mailing-list, x_refsource_MLIST

https://moodle.org/mod/forum/discuss.php?d=260362
Tags : x_refsource_CONFIRM

CVE-2014-0214 : Detail