CVE-2016-7038

{"id": "CVE-2016-7038", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 7.3, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 3.4, "exploitabilityScore": 3.9}]}, "published": "2017-01-20T08:59:00.283", "references": [{"url": "http://www.securityfocus.com/bid/93174", "tags": ["Third Party Advisory", "VDB Entry"], "source": "secalert@redhat.com"}, {"url": "https://moodle.org/mod/forum/discuss.php?d=339631", "tags": ["Patch", "Vendor Advisory"], "source": "secalert@redhat.com"}, {"url": "http://www.securityfocus.com/bid/93174", "tags": ["Third Party Advisory", "VDB Entry"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://moodle.org/mod/forum/discuss.php?d=339631", "tags": ["Patch", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-640"}]}], "descriptions": [{"lang": "en", "value": "In Moodle 2.x and 3.x, web service tokens are not invalidated when the user password is changed or forced to be changed."}, {"lang": "es", "value": "En Moodle 2.x y 3.x, tokens de servicio web no son invalidados cuando la contrase\u00f1a de usuario es cambiada o se obliga a cambiarla."}], "lastModified": "2024-11-21T02:57:19.900", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "14E3BCF7-CE60-43EE-8738-38F729C6B3C3", "versionEndIncluding": "2.7.15"}, {"criteria": "cpe:2.3:a:moodle:moodle:2.8.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "12737AF4-B2D5-4661-B06A-6A06FE95EC2D"}, {"criteria": "cpe:2.3:a:moodle:moodle:2.8.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "88C59A94-D225-478A-B23E-41C4324BC643"}, {"criteria": "cpe:2.3:a:moodle:moodle:2.8.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "192EA69B-A1E1-4E0D-8E73-76EB74CCDE49"}, {"criteria": "cpe:2.3:a:moodle:moodle:2.8.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D88385B1-EEFB-4825-BD8F-215C39FD86DA"}, {"criteria": "cpe:2.3:a:moodle:moodle:2.8.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A3BE2782-D167-4237-B57D-2E4C04571524"}, {"criteria": "cpe:2.3:a:moodle:moodle:2.8.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F277F979-12FA-47A5-B0A5-D174C2127A7D"}, {"criteria": "cpe:2.3:a:moodle:moodle:2.8.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "38498617-8E45-4E73-AE9F-C7A0D18FDE47"}, {"criteria": "cpe:2.3:a:moodle:moodle:2.8.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C9047769-BFF4-42DB-8B19-F6D16FA910A1"}, {"criteria": "cpe:2.3:a:moodle:moodle:2.8.8:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "73A75ACE-FED2-4830-B259-744ABF25463E"}, {"criteria": "cpe:2.3:a:moodle:moodle:2.8.9:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F04EBA18-DFFF-4529-B647-98191325663B"}, {"criteria": "cpe:2.3:a:moodle:moodle:2.8.10:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A3A746AB-5D58-4196-962A-D22454C3550B"}, {"criteria": "cpe:2.3:a:moodle:moodle:2.8.11:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B549AD98-4DC5-4BE8-B3E0-3EEF1833E6D7"}, {"criteria": "cpe:2.3:a:moodle:moodle:2.8.12:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9F030E8C-0C49-41DC-9D40-A704A563C156"}, {"criteria": "cpe:2.3:a:moodle:moodle:2.9.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C9224D94-1C48-468C-A39B-B2694ED178F4"}, {"criteria": "cpe:2.3:a:moodle:moodle:2.9.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1C7EE9AD-E122-4288-9416-6D8F8790D75D"}, {"criteria": "cpe:2.3:a:moodle:moodle:2.9.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C4FC2CC1-787B-480F-BC41-538CE2507CB7"}, {"criteria": "cpe:2.3:a:moodle:moodle:2.9.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "098BADF2-C1D3-406E-9E79-E25483178C99"}, {"criteria": "cpe:2.3:a:moodle:moodle:2.9.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "611B027A-38D6-445E-BFA9-FA68524147DB"}, {"criteria": "cpe:2.3:a:moodle:moodle:2.9.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5654B446-F7A5-49D4-90D9-478C18220A32"}, {"criteria": "cpe:2.3:a:moodle:moodle:2.9.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4E7CA637-D1BF-437D-8AD9-A21AE97E8681"}, {"criteria": "cpe:2.3:a:moodle:moodle:2.9.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "62F27D6B-01A9-43EA-B5FF-28BB90DA6935"}, {"criteria": "cpe:2.3:a:moodle:moodle:3.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8C22EB95-6D8F-45F8-A000-795E259CF06D"}, {"criteria": "cpe:2.3:a:moodle:moodle:3.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "65FE0DC7-131E-4ED1-9CFF-70C79995A0B9"}, {"criteria": "cpe:2.3:a:moodle:moodle:3.0.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "80B3EEF9-F300-461F-9407-0FFB3E3CD421"}, {"criteria": "cpe:2.3:a:moodle:moodle:3.0.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0C702CFE-417E-45E2-94DD-07A9DADDA89E"}, {"criteria": "cpe:2.3:a:moodle:moodle:3.0.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9D6DBB2B-5DAF-452F-9336-F8AB5825F638"}, {"criteria": "cpe:2.3:a:moodle:moodle:3.0.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E70D9F51-1353-4030-B164-1F9F7F7C0F0F"}, {"criteria": "cpe:2.3:a:moodle:moodle:3.1.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0033EC68-98DB-42E6-A256-EFA05F6EC72E"}, {"criteria": "cpe:2.3:a:moodle:moodle:3.1.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "27EC92C0-87A6-4D86-B940-C907EC4153ED"}], "operator": "OR"}]}], "sourceIdentifier": "secalert@redhat.com"}