4.3

CVE-2017-1000155

Exploit
Mahara 15.04 before 15.04.8 and 15.10 before 15.10.4 and 16.04 before 16.04.2 are vulnerable to profile pictures being accessed without any access control checks consequently allowing any of a user's uploaded profile pictures to be viewable by anyone, whether or not they were currently selected as the "default" or used in any pages.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Mahara ≫ Mahara Version 15.04 Update rc1
Mahara ≫ Mahara Version 15.04 Update rc2
Mahara ≫ Mahara Version 15.04.0
Mahara ≫ Mahara Version 15.04.1
Mahara ≫ Mahara Version 15.04.2
Mahara ≫ Mahara Version 15.04.3
Mahara ≫ Mahara Version 15.04.4
Mahara ≫ Mahara Version 15.04.5
Mahara ≫ Mahara Version 15.04.6
Mahara ≫ Mahara Version 15.04.7
Mahara ≫ Mahara Version 16.04 Update rc1
Mahara ≫ Mahara Version 16.04 Update rc2
Mahara ≫ Mahara Version 16.04.0
Mahara ≫ Mahara Version 16.04.1
Mahara ≫ Mahara Version 15.10.0
Mahara ≫ Mahara Version 15.10.1
Mahara ≫ Mahara Version 15.10.2
Mahara ≫ Mahara Version 15.10.3
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.68% 0.474
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 4.3 2.8 1.4
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
NIST 4 8 2.9
AV:N/AC:L/Au:S/C:P/I:N/A:N
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

https://bugs.launchpad.net/mahara/+bug/1600069
Patch
Third Party Advisory
Exploit
Issue Tracking