CVE-2017-1000131 - Mahara 15.04 before 15.04.8 and 15.10 before 15.10.4 and 16.04 before 16.04.2 are vulnerable to users staying logged in to their Mahara account even when they have been logged out of Moodle (when using MNet) as Mahara did not properly implement one of the MNet SSO API functions

Back Back to CVE browser

MEDIUM

Mahara 15.04 before 15.04.8 and 15.10 before 15.10.4 and 16.04 before 16.04.2 are vulnerable to users staying logged in to their Mahara account even when they have been logged out of Moodle (when using MNet) as Mahara did not properly implement one of the MNet SSO API functions

Published Nov 3, 2017

6.5

MEDIUM

CVSS 3.0

EPSS 0.62%

Description

Mahara 15.04 before 15.04.8 and 15.10 before 15.10.4 and 16.04 before 16.04.2 are vulnerable to users staying logged in to their Mahara account even when they have been logged out of Moodle (when using MNet) as Mahara did not properly implement one of the MNet SSO API functions.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-613

References (1)

https://bugs.launchpad.net/mahara/+bug/1084336
x_refsource_MISCExploitIssue TrackingPatchThird Party Advisory

Link	Providers	Tags
https://bugs.launchpad.net/mahara/+bug/1084336		x_refsource_MISCExploitIssue TrackingPatchThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Nov 3, 2017

Updated Aug 5, 2024

Reserved Nov 2, 2017

Link CVE-2017-1000131

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2017-1000131

Red Hat

Severity n/a

Public date n/a

Links CVE-2017-1000131