Description

Moodle before 2.2.2 has a password and web services issue where when the user profile is updated the user password is reset if not specified.

Remediation

References

CVE-2012-1168

Related Vulnerabilities

WordPress Plugin SG Optimizer Multiple Vulnerabilities (3.3.5)

ownCloud Other Vulnerability (CVE-2014-2054)

PHP Other Vulnerability (CVE-2002-1783)

IBM RTC Improper Restriction of XML External Entity Reference Vulnerability (CVE-2016-0284)

WordPress 5.0.x Multiple Vulnerabilities (5.0 - 5.0.19)

Severity

High

Classification

CVE-2012-1168 CWE-20 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L

Tags

Missing Update Known Vulnerabilities