CVE-2016-7038
Description
In Moodle 2.x and 3.x, web service tokens are not invalidated when the user password is changed or forced to be changed.
CWE
- (none)
Affected
- n/a / Moodle 2.x and 3.x — v=Moodle 2.x and 3.x [affected]
CVSS
- (none)
References
- https://moodle.org/mod/forum/discuss.php?d=339631 x_refsource_CONFIRM
- http://www.securityfocus.com/bid/93174 vdb-entry, x_refsource_BID
Source
cvelistV5-main/cves/2016/7xxx/CVE-2016-7038.json