CVE-2024-47876

Sakai is a Collaboration and Learning Environment. Starting in version 23.0 and prior to version 23.2, kernel users created with type roleview can log in as a normal user. This can result in illegal access being granted to the system. Version 23.3 fixes this vulnerability...

CVE-2024-47876

Sakai is a Collaboration and Learning Environment. Starting in version 23.0 and prior to version 23.2, kernel users created with type roleview can log in as a normal user. This can result in illegal access being granted to the system. Version 23.3 fixes this vulnerability...

CVE-2024-47876 Sakai: Kernel users created with type roleview can login as a normal user

Sakai is a Collaboration and Learning Environment. Starting in version 23.0 and prior to version 23.2, kernel users created with type roleview can log in as a normal user. This can result in illegal access being granted to the system. Version 23.3 fixes this vulnerability...

CVE-2024-47876 Sakai: Kernel users created with type roleview can login as a normal user

Sakai is a Collaboration and Learning Environment. Starting in version 23.0 and prior to version 23.2, kernel users created with type roleview can log in as a normal user. This can result in illegal access being granted to the system. Version 23.3 fixes this vulnerability...

CVE-2024-47876 Sakai: Kernel users created with type roleview can login as a normal user

Sakai is a Collaboration and Learning Environment. Starting in version 23.0 and prior to version 23.2, kernel users created with type roleview can log in as a normal user. This can result in illegal access being granted to the system. Version 23.3 fixes this vulnerability...

CVE-2024-47876

Sakai Kernel vulnerability CVE-2024-47876: Kernel users created with the type roleview could log in as normal users, enabling unauthorized access. Affected in Sakai versions up to 23.2; fixed in 23.3. Root cause: improper access control allowing roleview kernel users to authenticate as non-privil...

SAK-50571 Sakai Kernel users created with type roleview can login as a normal user

Impact Illegal access can be granted to the system. References see https://sakaiproject.atlassian.net/browse/SAK-50571...

GHSA-CX95-Q6GX-W4QP SAK-50571 Sakai Kernel users created with type roleview can login as a normal user

Impact Illegal access can be granted to the system. References see https://sakaiproject.atlassian.net/browse/SAK-50571...

PT-2024-32866

Name of the Vulnerable Software and Affected Versions Sakai versions 23.0 through 23.2 Description The issue allows kernel users created with type roleview to log in as a normal user, resulting in illegal access being granted to the system. This can pose security risks. Recommendations For Sakai...

Sakai security vulnerabilities

Sakai is a freely available, feature-rich technology solution for learning, teaching, research and collaboration from Apereo Sakai Open Source. A security vulnerability exists in Sakai versions prior to 23.0 through 23.2, which stems from the fact that a kernel user created using the roleview typ...

CVE-2024-47876: Improper Authorization

Sakai is a Collaboration and Learning Environment. Starting in version 23.0 and prior to version 23.2, kernel users created with type roleview can log in as a normal user. This can result in illegal access being granted to the system. Version 23.3 fixes this vulnerability...

sakai-lawyer.jp Cross Site Scripting vulnerability OBB-3909839

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

sakai-chintai.net Improper Access Control vulnerability OBB-3860315

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

sakai-syakyo.net Cross Site Scripting vulnerability OBB-3581063

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

maven:maven-artifact-plugin (>=1.4, <=1.6), maven:maven-site-plugin (>=1.5.1, <=1.6) +5 more potentially affected by CVE-2021-37533 via commons-net:commons-net (1.1.0)

commons-net:commons-net MAVEN version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on commons-net:commons-net and may be impacted: - maven:maven-artifact-plugin =1.4, =1.5.1, =1.0-alpha-2, =2.9.0-b03, =0.0.1, =20040825.211642, =20040825.214656...

org.apache.abdera:abdera-bundle (>=1.1.2, <=1.1.3), org.apache.abdera:abdera-jcr (>=0.4.0-incubating, <=1.1.3) +6 more potentially affected by CVE-2015-1833 via org.apache.jackrabbit:jackrabbit-core (1.4)

org.apache.jackrabbit:jackrabbit-core MAVEN version 1.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.jackrabbit:jackrabbit-core and may be impacted: - org.apache.abdera:abdera-bundle =1.1.2, =0.4.0-incubating, =1.14, =1.3.0-b03, =1.3.0-b0...

org.sakaiproject:sakai-dav-server (>=10.3, <=10.7), org.testatoo.container:testatoo-container-tomcat (>=1.0-rc1, <=1.0-rc2) potentially affected by CVE-2016-8735 via org.apache.tomcat:tomcat-catalina-jmx-remote (>=7.0.5, <=7.0.65)

org.apache.tomcat:tomcat-catalina-jmx-remote MAVEN version =7.0.5, =10.3, =1.0-rc1, =1.0-rc2 Source cves: CVE-2016-8735 Source advisory: GHSA-CW54-59PW-4G8C...

net.stickycode.deploy:sticky-deployer-tomcat8 (2.1), org.sakaiproject:sakai-dav-server (>=11.0, <=11.3) potentially affected by CVE-2016-8735 via org.apache.tomcat:tomcat-catalina-jmx-remote (>=8.0.20, <=8.0.32)

org.apache.tomcat:tomcat-catalina-jmx-remote MAVEN version =8.0.20, =11.0, =11.3 Source cves: CVE-2016-8735 Source advisory: GHSA-CW54-59PW-4G8C...

org.sakaiproject:sakai-dav-server (>=10.3, <=10.7), org.testatoo.container:testatoo-container-tomcat (>=1.0-rc1, <=1.0-rc2) potentially affected by CVE-2016-8735 via org.apache.tomcat:tomcat-catalina-jmx-remote (>=7.0.5, <=7.0.65)

org.apache.tomcat:tomcat-catalina-jmx-remote MAVEN version =7.0.5, =10.3, =1.0-rc1, =1.0-rc2 Source cves: CVE-2016-8735 Source advisory: OSV:GHSA-CW54-59PW-4G8C...

WordPress MicroPayments plugin <= 1.9.5 - Arbitrary Settings Update via Cross-Site Request Forgery (CSRF) vulnerability

Arbitrary Settings Update via Cross-Site Request Forgery CSRF vulnerability discovered by Kosuke Sakai in WordPress MicroPayments plugin versions = 1.9.5. Solution Update the WordPress MicroPayments plugin to the latest available version at least 1.9.6...