7.5

CVE-2017-1000151

Mahara 15.04 before 15.04.9 and 15.10 before 15.10.5 and 16.04 before 16.04.3 are vulnerable to passwords or other sensitive information being passed by unusual parameters to end up in an error log.

Data is provided by the National Vulnerability Database (NVD)
Mahara ≫ Mahara Version15.04 Updaterc1
Mahara ≫ Mahara Version15.04 Updaterc2
Mahara ≫ Mahara Version15.04.0
Mahara ≫ Mahara Version15.04.1
Mahara ≫ Mahara Version15.04.2
Mahara ≫ Mahara Version15.04.3
Mahara ≫ Mahara Version15.04.4
Mahara ≫ Mahara Version15.04.5
Mahara ≫ Mahara Version15.04.6
Mahara ≫ Mahara Version15.04.7
Mahara ≫ Mahara Version15.04.8
Mahara ≫ Mahara Version16.04 Updaterc1
Mahara ≫ Mahara Version16.04 Updaterc2
Mahara ≫ Mahara Version16.04.0
Mahara ≫ Mahara Version16.04.1
Mahara ≫ Mahara Version16.04.2
Mahara ≫ Mahara Version15.10.0
Mahara ≫ Mahara Version15.10.1
Mahara ≫ Mahara Version15.10.2
Mahara ≫ Mahara Version15.10.3
Mahara ≫ Mahara Version15.10.4
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.25% 0.483
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.5 3.9 3.6
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:P/I:N/A:N
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

https://bugs.launchpad.net/mahara/+bug/1570221
Patch
Third Party Advisory
Issue Tracking