Vulnerability Details CVE-2017-1000003
ATutor versions 2.2.1 and earlier are vulnerable to an incorrect access control check vulnerability in the Social Application component resulting in privilege escalation. ATutor versions 2.2.1 and earlier are vulnerable to an incorrect access control check vulnerability in the Module component resulting in privilege escalation. ATutor versions 2.2.1 and earlier are vulnerable to a incorrect access control check vulnerability in the Alternative Content component resulting in privilege escalation.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 51.1%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 7.5
Products affected by CVE-2017-1000003
-
cpe:2.3:a:atutor:atutor:0.9.6
-
cpe:2.3:a:atutor:atutor:0.9.7
-
cpe:2.3:a:atutor:atutor:1.0
-
cpe:2.3:a:atutor:atutor:1.2.1
-
cpe:2.3:a:atutor:atutor:1.2.2
-
cpe:2.3:a:atutor:atutor:1.3
-
cpe:2.3:a:atutor:atutor:1.3.1
-
cpe:2.3:a:atutor:atutor:1.3.2
-
cpe:2.3:a:atutor:atutor:1.3.3
-
cpe:2.3:a:atutor:atutor:1.4
-
cpe:2.3:a:atutor:atutor:1.4.1
-
cpe:2.3:a:atutor:atutor:1.4.2
-
cpe:2.3:a:atutor:atutor:1.4.3
-
cpe:2.3:a:atutor:atutor:1.5
-
cpe:2.3:a:atutor:atutor:1.5.1
-
cpe:2.3:a:atutor:atutor:1.5.2
-
cpe:2.3:a:atutor:atutor:1.5.3
-
cpe:2.3:a:atutor:atutor:1.5.3.1
-
cpe:2.3:a:atutor:atutor:1.5.3.2
-
cpe:2.3:a:atutor:atutor:1.5.3.3
-
cpe:2.3:a:atutor:atutor:1.5.4
-
cpe:2.3:a:atutor:atutor:1.5.5
-
cpe:2.3:a:atutor:atutor:1.6
-
cpe:2.3:a:atutor:atutor:1.6.1
-
cpe:2.3:a:atutor:atutor:1.6.2
-
cpe:2.3:a:atutor:atutor:1.6.3
-
cpe:2.3:a:atutor:atutor:1.6.4
-
cpe:2.3:a:atutor:atutor:2.0
-
cpe:2.3:a:atutor:atutor:2.0.1
-
cpe:2.3:a:atutor:atutor:2.0.2
-
cpe:2.3:a:atutor:atutor:2.0.3
-
cpe:2.3:a:atutor:atutor:2.1
-
cpe:2.3:a:atutor:atutor:2.1.1
-
cpe:2.3:a:atutor:atutor:2.2
-
cpe:2.3:a:atutor:atutor:2.2.1