Lucene search
K

CVE-2012-2351

🗓️ 12 Jul 2012 20:00:00Reported by redhatType 
cve
 cve
🔗 web.nvd.nist.gov👁 65 Views

The default configuration of the auth/saml plugin in Mahara before 1.4.2 sets the "Match username attribute to Remote username" option to false, allowing remote SAML IdP servers to spoof users of other SAML IdP servers

Related
Detection
Refs
ReporterTitlePublishedViews
Family
Cvelist
CVE-2012-2351
12 Jul 201220:00
cvelist
Tenable Nessus
Debian DSA-2467-1 : mahara - insecure defaults
10 May 201200:00
nessus
EUVD
EUVD-2012-2344
7 Oct 202500:30
euvd
NVD
CVE-2012-2351
12 Jul 201220:55
nvd
OpenVAS
Debian: Security Advisory (DSA-2467-1)
31 May 201200:00
openvas
OpenVAS
Debian Security Advisory DSA 2467-1 (mahara)
31 May 201200:00
openvas
OSV
DSA-2467-1 mahara - insecure defaults
9 May 201200:00
osv
Prion
Default configuration
12 Jul 201220:55
prion
RedhatCVE
CVE-2012-2351
22 May 202512:09
redhatcve
UbuntuCve
CVE-2012-2351
12 Jul 201220:55
ubuntucve
Rows per page
NVD
Node
Node
maharamaharaRange1.4.1
OR
maharamaharaMatch0.9.0
OR
maharamaharaMatch0.9.1
OR
maharamaharaMatch0.9.2
OR
maharamaharaMatch1.0.0
OR
maharamaharaMatch1.0.1
OR
maharamaharaMatch1.0.2
OR
maharamaharaMatch1.0.3
OR
maharamaharaMatch1.0.4
OR
maharamaharaMatch1.0.5
OR
maharamaharaMatch1.0.6
OR
maharamaharaMatch1.0.7
OR
maharamaharaMatch1.0.8
OR
maharamaharaMatch1.0.9
OR
maharamaharaMatch1.0.10
OR
maharamaharaMatch1.0.11
OR
maharamaharaMatch1.0.12
OR
maharamaharaMatch1.0.13
OR
maharamaharaMatch1.0.14
OR
maharamaharaMatch1.0.15
OR
maharamaharaMatch1.1
OR
maharamaharaMatch1.1.0
OR
maharamaharaMatch1.1.0alpha1
OR
maharamaharaMatch1.1.0alpha2
OR
maharamaharaMatch1.1.0alpha3
OR
maharamaharaMatch1.1.0beta1
OR
maharamaharaMatch1.1.0beta2
OR
maharamaharaMatch1.1.0beta3
OR
maharamaharaMatch1.1.0beta4
OR
maharamaharaMatch1.1.0rc1
OR
maharamaharaMatch1.1.0rc2
OR
maharamaharaMatch1.1.1
OR
maharamaharaMatch1.1.2
OR
maharamaharaMatch1.1.3
OR
maharamaharaMatch1.1.4
OR
maharamaharaMatch1.1.5
OR
maharamaharaMatch1.1.6
OR
maharamaharaMatch1.1.7
OR
maharamaharaMatch1.1.8
OR
maharamaharaMatch1.1.9
OR
maharamaharaMatch1.2.0
OR
maharamaharaMatch1.2.0alpha1
OR
maharamaharaMatch1.2.0alpha2
OR
maharamaharaMatch1.2.0alpha3
OR
maharamaharaMatch1.2.0beta1
OR
maharamaharaMatch1.2.0beta2
OR
maharamaharaMatch1.2.0beta3
OR
maharamaharaMatch1.2.0beta4
OR
maharamaharaMatch1.2.0rc1
OR
maharamaharaMatch1.2.1
OR
maharamaharaMatch1.2.2
OR
maharamaharaMatch1.2.3
OR
maharamaharaMatch1.2.4
OR
maharamaharaMatch1.2.5
OR
maharamaharaMatch1.2.6
OR
maharamaharaMatch1.3.0
OR
maharamaharaMatch1.3.0beta1
OR
maharamaharaMatch1.3.0beta2
OR
maharamaharaMatch1.3.0beta3
OR
maharamaharaMatch1.3.0beta4
OR
maharamaharaMatch1.3.0rc1
OR
maharamaharaMatch1.3.1
OR
maharamaharaMatch1.3.2
OR
maharamaharaMatch1.3.3
OR
maharamaharaMatch1.3.4
OR
maharamaharaMatch1.3.5
OR
maharamaharaMatch1.3.6
OR
maharamaharaMatch1.3.7
OR
maharamaharaMatch1.3.8
OR
maharamaharaMatch1.4rc1
OR
maharamaharaMatch1.4rc2
OR
maharamaharaMatch1.4rc3
OR
maharamaharaMatch1.4rc4
OR
maharamaharaMatch1.4.0

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

29 Apr 2026 01:13Current
6.8Medium risk
Vulners AI Score6.8
CVSS 25
EPSS0.00331
65