CVE-2009-2171 - Mahara 1.1 before 1.1.5 does not apply permission checks when saving a view that contains artefacts, which allows remote authenticated users to read another user's artefact

Back Back to CVE browser

MEDIUM

Mahara 1.1 before 1.1.5 does not apply permission checks when saving a view that contains artefacts, which allows remote authenticated users to read another user's artefact

Published Jun 23, 2009

4.0

MEDIUM

CVSS 2.0

EPSS 0.92%

Description

Mahara 1.1 before 1.1.5 does not apply permission checks when saving a view that contains artefacts, which allows remote authenticated users to read another user's artefact.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-264

References (2)

http://mahara.org/interaction/forum/topic.php?id=753
x_refsource_CONFIRMVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2009-2167
Advisory

Link	Providers	Tags
http://mahara.org/interaction/forum/topic.php?id=753		x_refsource_CONFIRMVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2009-2167		Advisory