CVE-2012-2357: The Multi-Authentication feature in the Central Authentication Service (CAS) functionality in auth/cas/cas_...

Security readout for executives and security teams

Older Moodle 2.1 and 2.2 deployments could expose CAS login credentials because the multi-authentication CAS form did not use HTTPS. An attacker able to observe network traffic could capture credentials. This is mainly a legacy exposure risk for organizations still running those Moodle branches or preserving old instances. Exposure is likely limited to legacy Moodle 2.1.x or 2.2.x installations using CAS multi-authentication. Systems already upgraded beyond 2.1.6 or 2.2.3, not using CAS, or enforcing HTTPS throughout authentication paths are less likely to be affected. Prioritize remediation if any affected Moodle instance still handles real user logins. The business risk is credential compromise, not system takeover in the cited material. Because the issue is old, the highest priority is finding forgotten legacy deployments. Mitigation focus: Upgrade Moodle 2.1.x to at least 2.1.6 or 2.2.x to at least 2.2.3.; Check current Moodle vendor guidance for supported upgrade paths and security advisories.; Require HTTPS for all authentication pages and redirects..

Prepared

Jun 24, 2026, 12:34 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.