CVE-2016-7038

In Moodle 2.x and 3.x, web service tokens are not invalidated when the user password is changed or forced to be changed

published January 20, 2017

CVSS
—
EPSS
1%
Percentile
61.4
In the wild
Unconfirmed
What it is

In Moodle 2.x and 3.x, web service tokens are not invalidated when the user password is changed or forced to be changed.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00972 · 61.4th percentile
Published
2017-01-20T08:39Z
EPSS history
Timeline
  • 20 JAN 08:39Z
    In Moodle 2.x and 3.x, web service tokens are not invalidated when the user password is changed or forced to be changed
    cvelistv5