Lucene search
Veracode Vulnerability DatabaseVERACODE:28016HistoryDec 02, 2020 - 5:12 a.m.
Insecure Session Management
2020-12-0205:12:07
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
12
moodle
insecure session
session tokens
invalidated
password change
EPSS
0.001
Percentile
36.5%
moodle/moodle uses an insecure session management. The session tokens are not invalidated or removed upon a successful password change.
Related
nessus
nessus
github
github
Moodle Weak Password Recovery Mechanism for Forgotten Password
2022-05-13 01:12:40
freebsd
freebsd
moodle -- multiple vulnerabilities
2016-09-12 00:00:00
ubuntucve
ubuntucve
CVE-2016-7038
2017-01-20 00:00:00
prion
prion
Default credentials
2017-01-20 08:59:00
cve
cve
CVE-2016-7038
2017-01-20 08:59:00
osv
osv
Moodle Weak Password Recovery Mechanism for Forgotten Password
2022-05-13 01:12:40
CVE-2016-7038
2017-01-20 08:59:00
nvd
nvd
CVE-2016-7038
2017-01-20 08:59:00
cvelist
cvelist
CVE-2016-7038
2017-01-20 08:39:00