Summary
This host is running Mahara and is prone to Information Disclosure Vulnerability.
Impact
Successful exploitation will allow attacker to gain sensitive information in the affected web application.
Impact Level: Application
Solution
Upgrade to Mahara version 1.1.5 or later
https://eduforge.org/projects/mahara/
Insight
- The application fails to apply permission checks when saving a view that contains artefacts, which allows remote authenticated users to read another user's artefact.
Affected
Mahara version 1.1 before 1.1.5
References
Updated on 2015-03-25
Severity
Classification
-
CVE CVE-2009-2171 -
CVSS Base Score: 4.0
AV:N/AC:L/Au:S/C:P/I:N/A:N
Related Vulnerabilities