CVE-2012-1168

CVE-2012-1168 describes a vulnerability in Moodle versions prior to 2.2.2 where updating a user profile without specifying a password would inadvertently reset the user's password. This flaw affects Moodle installations across various platforms, including Fedora and Red Hat Enterprise Linux. With a CVSS score of 8.2 (HIGH), this vulnerability presents a significant risk due to its network-based attack vector and low attack complexity, potentially leading to high integrity impact (password resets) and low availability impact. The absence of authentication requirements makes it easily exploitable. Currently, there is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal, suggesting it has not garnered widespread attention.