CVE-2016-7038

Опубликовано: 20 янв. 2017

Источник: nvd

CVSS3: 7.3

CVSS2: 5

EPSS Низкий

Описание

In Moodle 2.x and 3.x, web service tokens are not invalidated when the user password is changed or forced to be changed.

Ссылки

http://www.securityfocus.com/bid/93174
Third Party Advisory
VDB Entry
https://moodle.org/mod/forum/discuss.php?d=339631
Patch
Vendor Advisory
http://www.securityfocus.com/bid/93174
Third Party Advisory
VDB Entry
https://moodle.org/mod/forum/discuss.php?d=339631
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*

Версия до 2.7.15 (включая)

cpe:2.3:a:moodle:moodle:2.8.0:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.8.1:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.8.2:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.8.3:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.8.4:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.8.5:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.8.6:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.8.7:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.8.8:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.8.9:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.8.10:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.8.11:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.8.12:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.9.0:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.9.1:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.9.2:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.9.3:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.9.4:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.9.5:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.9.6:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.9.7:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:3.0.0:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:3.0.1:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:3.0.2:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:3.0.3:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:3.0.4:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:3.0.5:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:3.1.0:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:3.1.1:*:*:*:*:*:*:*

EPSS

Процентиль: 47%

0.00243

Низкий

7.3 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-640

Связанные уязвимости

CVE-2016-7038

CVSS3: 7.3

ubuntu

больше 8 лет назад

In Moodle 2.x and 3.x, web service tokens are not invalidated when the user password is changed or forced to be changed.

CVE-2016-7038

CVSS3: 7.3

debian

больше 8 лет назад

In Moodle 2.x and 3.x, web service tokens are not invalidated when the ...

GHSA-2phx-w35g-x9vm

CVSS3: 7.3

github

около 3 лет назад

Moodle Weak Password Recovery Mechanism for Forgotten Password

EPSS

Процентиль: 47%

0.00243

Низкий

7.3 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-640