CVE-2016-7038

Published: 2017-01-20T08:59Z

Last Modified: 2024-11-21T02:57Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

In Moodle 2.x and 3.x, web service tokens are not invalidated when the user password is changed or forced to be changed. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt