CVE-2021-40693
Published on: 01/21/2022 12:00:00 AM UTC
Last Modified on: 02/12/2023 10:10:56 PM UTC
Certain versions of Moodle from Moodle contain the following vulnerability:
An authentication bypass risk was identified in the external database authentication functionality, due to a type juggling vulnerability.
- CVE-2021-40693 has been assigned by
[email protected] to track the vulnerability - currently rated as MEDIUM severity.
CVSS3 Score: 6.5 - MEDIUM
| Attack Vector ⓘ |
Attack Complexity |
Privileges Required |
User Interaction |
|---|---|---|---|
| NETWORK | LOW | LOW | NONE |
| Scope | Confidentiality Impact |
Integrity Impact |
Availability Impact |
| UNCHANGED | NONE | HIGH | NONE |
CVE References
| Description | Tags ⓘ | Link |
|---|---|---|
| cve-website | www.cve.org text/html |
MISC www.cve.org/CVERecord?id=CVE-2021-40693 |
| 2043417 – (CVE-2021-40693) CVE-2021-40693 moodle: authentication bypass risk when using external database | bugzilla.redhat.com text/html |
MISC bugzilla.redhat.com/show_bug.cgi?id=2043417 |
There are currently no QIDs associated with this CVE
Exploit/POC from Github
An authentication bypass risk was identified in the external database authentication functionality, due to a type jug…
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Moodle | Moodle | All | All | All | All |
- cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*:
No vendor comments have been submitted for this CVE
Social Mentions
| Source | Title | Posted (UTC) |
|---|---|---|
 @management_sun |
IT Risk:Moodleに複数の脆弱性 Windows UNIX variants (UNIX, Linux, OSX) CVE-2021-40695 CVE-2021-40694 CVE-2021-40693 CVE-202… twitter.com/i/web/status/1… | 2021-09-21 00:43:03 |
| @CVEreport |
CVE-2021-40693 : An authentication bypass risk was identified in the external database authentication functionality… twitter.com/i/web/status/1… | 2022-01-21 19:46:00 |
 /r/netcve |
CVE-2021-40693 | 2022-01-21 20:42:12 |