Click2Learn Ingenium Learning Management System 5.1 and 6.1 stores the hashed administrative password in a config.txt file under the htdocs directory, which allows remote attackers to obtain the administrative password.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Ingenium_learning_management_system | Click2learn | 5.1 (including) | 5.1 (including) |
Ingenium_learning_management_system | Click2learn | 6.1 (including) | 6.1 (including) |