Lucene search

GoogleOSV:CVE-2017-1000141

HistoryJan 30, 2018 - 7:29 p.m.

CVE-2017-1000141

2018-01-3019:29:00

Google

osv.dev

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

6.4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:P/A:P

0.001 Low

EPSS

Percentile

41.4%

JSON

An issue was discovered in Mahara before 18.10.0. It mishandled user requests that could discontinue a user’s ability to maintain their own account (changing username, changing primary email address, deleting account). The correct behavior was to either prompt them for their password and/or send a warning to their primary email address.

CPENameOperatorVersion
maharaeq1.1.0ALPHA1_RELEASE
maharaeq1.2.0BETA1_RELEASE
maharaeq1.2.0BETA3_RELEASE
maharaeq1.0.0ALPHA1_RELEASE
maharaeq1.0.0BETA2_RELEASE
maharaeq1.2.0ALPHA2_RELEASE
maharaeq1.0.0ALPHA2_RELEASE
maharaeq1.2.0BETA4_RELEASE
maharaeq1.1.0BETA1_RELEASE
maharaeq1.7RC1_RELEASE

Name	Operator	Version
mahara	eq	1.1.0ALPHA1_RELEASE
mahara	eq	1.2.0BETA1_RELEASE
mahara	eq	1.2.0BETA3_RELEASE
mahara	eq	1.0.0ALPHA1_RELEASE
mahara	eq	1.0.0BETA2_RELEASE
mahara	eq	1.2.0ALPHA2_RELEASE
mahara	eq	1.0.0ALPHA2_RELEASE
mahara	eq	1.2.0BETA4_RELEASE
mahara	eq	1.1.0BETA1_RELEASE
mahara	eq	1.7RC1_RELEASE

Rows per page:

1-10 of 301

References

bugs.launchpad.net/mahara/+bug/1422492

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

6.4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:P/A:P

0.001 Low

EPSS

Percentile

41.4%

JSON

Related for OSV:CVE-2017-1000141