What is CVE-2012-1168?

CVE-2012-1168 is a high-severity software vulnerability (Improper input validation) with a CVSS score of 8.2. Moodle before 2.2.2 has a password and web services issue where when the user profile is updated the user password is reset if not specified.

Is CVE-2012-1168 being actively exploited?

It is not currently in CISA's KEV catalog. Its EPSS exploitation probability is 2%.

What products does CVE-2012-1168 affect?

Tracked products affected include Fedora. Check the version you run to see whether it is affected.

How do I fix CVE-2012-1168?

Apply the vendor fix promptly. An official patch or advisory is available. Upgrade affected products to a fixed version.

← All products

CVE-2012-1168

HIGH severity · CVSS 8.2 · Improper input validation

8.2CVSS HIGH

Summary

Moodle before 2.2.2 has a password and web services issue where when the user profile is updated the user password is reset if not specified.

Impact & exploitability

Attack vectorNetwork

Attack complexityLow

Privileges requiredNone

User interactionNone

Confidentiality impactNone

Integrity impactHigh

Availability impactLow

Exploit probability (EPSS)2%

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L

Affected products we track (1)

Fedora

Recommendation

Apply the vendor fix promptly. Open any affected product above for its exact safe version.

Official patch: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-1168 ↗

Additional information

NVD record
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-1168Patch
https://moodle.org/mod/forum/discuss.php?d=198622Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077635.htmlAdvisory
http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078209.htmlAdvisory
http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078210.htmlAdvisory
http://lists.fedoraproject.org/pipermail/package-announce/2012-May/080712.htmlAdvisory
http://lists.fedoraproject.org/pipermail/package-announce/2012-May/081047.htmlAdvisory
https://access.redhat.com/security/cve/cve-2012-1168