Description

Moodle before 2.2.2 has a password and web services issue where when the user profile is updated the user password is reset if not specified.

Remediation

References

CVE-2012-1168

Related Vulnerabilities

WordPress Plugin FPW Category Thumbnails Multiple Unspecified Vulnerabilities (1.6.7)

Atlassian Jira Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-2928)

Craft CMS Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2026-31857)

Drupal Core 8.5.x Multiple Vulnerabilities (8.5.0 - 8.5.8)

WordPress Plugin Woody ad snippets-Insert Header Footer Code, AdSense Ads Cross-Site Scripting (2.2.7)

Severity

High

Classification

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L

Tags

Missing Update Known Vulnerabilities CWE-20 CVE-2012-1168