ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2016-7038

—
CVSS 3.0
7.3 high
EPSS
<1%p60
Published
()
Modified
Description

In Moodle 2.x and 3.x, web service tokens are not invalidated when the user password is changed or forced to be changed.

Vendors
moodle
Products
moodle
Weakness
CWE-640
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
NVD CVE.org GitHub PoCs EPSS (1.0%)

In the news

No ingested article mentions this CVE yet.