Description
Moodle before 2.2.2 has a password and web services issue where when the user profile is updated the user password is reset if not specified.
Remediation
References
Related Vulnerabilities
PostgreSQL Other Vulnerability (CVE-2006-5541)
WordPress Plugin Easy FancyBox Cross-Site Scripting (1.8.17)
MySQL Other Vulnerability (CVE-2006-2753)
Dolibarr Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2017-9840)
Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-2356)