Lucene search

[email protected]NVD:CVE-2011-1402

HistoryMay 13, 2011 - 10:55 p.m.

CVE-2011-1402

2011-05-1322:55:01

CWE-264

[email protected]

web.nvd.nist.gov

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

AI Score

6.1

Confidence

Low

EPSS

0.004

Percentile

74.4%

JSON

Mahara before 1.3.6 allows remote authenticated users to bypass intended access restrictions, and suspend a user account, edit a view, visit a view, edit a plan artefact, read a plans block, read a plan artefact, edit a blog, read a blog block, read a blog artefact, or access a block, via a request associated with (1) admin/users/search.json.php, (2) view/newviewtoken.json.php, (3) lib/mahara.php, (4) artefact/plans/tasks.json.php, (5) artefact/plans/viewtasks.json.php, (6) artefact/blog/view/index.json.php, (7) artefact/blog/posts.json.php, or (8) blocktype/myfriends/myfriends.json.php, related to incorrect privilege enforcement, a missing user id check, and incorrect enforcement of the Overriding Start/Stop Dates setting.

Affected configurations

Nvd

Node

maharamaharaRange≤1.3.5

maharamaharaMatch0.9.0

maharamaharaMatch0.9.1

maharamaharaMatch0.9.2

maharamaharaMatch1.0.0

maharamaharaMatch1.0.1

maharamaharaMatch1.0.2

maharamaharaMatch1.0.3

maharamaharaMatch1.0.4

maharamaharaMatch1.0.5

maharamaharaMatch1.0.6

maharamaharaMatch1.0.7

maharamaharaMatch1.0.8

maharamaharaMatch1.0.9

maharamaharaMatch1.0.10

maharamaharaMatch1.0.11

maharamaharaMatch1.0.12

maharamaharaMatch1.0.13

maharamaharaMatch1.0.14

maharamaharaMatch1.0.15

maharamaharaMatch1.1

maharamaharaMatch1.1.0

maharamaharaMatch1.1.0alpha1

maharamaharaMatch1.1.0alpha2

maharamaharaMatch1.1.0alpha3

maharamaharaMatch1.1.0beta1

maharamaharaMatch1.1.0beta2

maharamaharaMatch1.1.0beta3

maharamaharaMatch1.1.0beta4

maharamaharaMatch1.1.0rc1

maharamaharaMatch1.1.0rc2

maharamaharaMatch1.1.1

maharamaharaMatch1.1.2

maharamaharaMatch1.1.3

maharamaharaMatch1.1.4

maharamaharaMatch1.1.5

maharamaharaMatch1.1.6

maharamaharaMatch1.1.7

maharamaharaMatch1.1.8

maharamaharaMatch1.1.9

maharamaharaMatch1.2.0

maharamaharaMatch1.2.0alpha1

maharamaharaMatch1.2.0alpha2

maharamaharaMatch1.2.0alpha3

maharamaharaMatch1.2.0beta1

maharamaharaMatch1.2.0beta2

maharamaharaMatch1.2.0beta3

maharamaharaMatch1.2.0beta4

maharamaharaMatch1.2.0rc1

maharamaharaMatch1.2.1

maharamaharaMatch1.2.2

maharamaharaMatch1.2.3

maharamaharaMatch1.2.4

maharamaharaMatch1.2.5

maharamaharaMatch1.2.6

maharamaharaMatch1.3.0

maharamaharaMatch1.3.0beta1

maharamaharaMatch1.3.0beta2

maharamaharaMatch1.3.0beta3

maharamaharaMatch1.3.0beta4

maharamaharaMatch1.3.0rc1

maharamaharaMatch1.3.1

maharamaharaMatch1.3.2

maharamaharaMatch1.3.3

maharamaharaMatch1.3.4

VendorProductVersionCPE
maharamahara*cpe:2.3:a:mahara:mahara:*:*:*:*:*:*:*:*
maharamahara0.9.0cpe:2.3:a:mahara:mahara:0.9.0:*:*:*:*:*:*:*
maharamahara0.9.1cpe:2.3:a:mahara:mahara:0.9.1:*:*:*:*:*:*:*
maharamahara0.9.2cpe:2.3:a:mahara:mahara:0.9.2:*:*:*:*:*:*:*
maharamahara1.0.0cpe:2.3:a:mahara:mahara:1.0.0:*:*:*:*:*:*:*
maharamahara1.0.1cpe:2.3:a:mahara:mahara:1.0.1:*:*:*:*:*:*:*
maharamahara1.0.2cpe:2.3:a:mahara:mahara:1.0.2:*:*:*:*:*:*:*
maharamahara1.0.3cpe:2.3:a:mahara:mahara:1.0.3:*:*:*:*:*:*:*
maharamahara1.0.4cpe:2.3:a:mahara:mahara:1.0.4:*:*:*:*:*:*:*
maharamahara1.0.5cpe:2.3:a:mahara:mahara:1.0.5:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
mahara	mahara	*	cpe:2.3:a:mahara:mahara::::::::
mahara	mahara	0.9.0	cpe:2.3:a:mahara:mahara:0.9.0:::::::*
mahara	mahara	0.9.1	cpe:2.3:a:mahara:mahara:0.9.1:::::::*
mahara	mahara	0.9.2	cpe:2.3:a:mahara:mahara:0.9.2:::::::*
mahara	mahara	1.0.0	cpe:2.3:a:mahara:mahara:1.0.0:::::::*
mahara	mahara	1.0.1	cpe:2.3:a:mahara:mahara:1.0.1:::::::*
mahara	mahara	1.0.2	cpe:2.3:a:mahara:mahara:1.0.2:::::::*
mahara	mahara	1.0.3	cpe:2.3:a:mahara:mahara:1.0.3:::::::*
mahara	mahara	1.0.4	cpe:2.3:a:mahara:mahara:1.0.4:::::::*
mahara	mahara	1.0.5	cpe:2.3:a:mahara:mahara:1.0.5:::::::*