Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2017-1000154

Mahara 15.04 before 15.04.8 and 15.10 before 15.10.4 and 16.04 before 16.04.2 are vulnerable to some authentication methods, which do not use Mahara's built-in login form, still allowing users to log in even if their institution was expired or suspended.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.006
EPSS Ranking 68.7%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 7.5
Products affected by CVE-2017-1000154
  • Mahara » Mahara » Version: 15.04
    cpe:2.3:a:mahara:mahara:15.04
  • Mahara » Mahara » Version: 15.04.0
    cpe:2.3:a:mahara:mahara:15.04.0
  • Mahara » Mahara » Version: 15.04.1
    cpe:2.3:a:mahara:mahara:15.04.1
  • Mahara » Mahara » Version: 15.04.2
    cpe:2.3:a:mahara:mahara:15.04.2
  • Mahara » Mahara » Version: 15.04.3
    cpe:2.3:a:mahara:mahara:15.04.3
  • Mahara » Mahara » Version: 15.04.4
    cpe:2.3:a:mahara:mahara:15.04.4
  • Mahara » Mahara » Version: 15.04.5
    cpe:2.3:a:mahara:mahara:15.04.5
  • Mahara » Mahara » Version: 15.04.6
    cpe:2.3:a:mahara:mahara:15.04.6
  • Mahara » Mahara » Version: 15.04.7
    cpe:2.3:a:mahara:mahara:15.04.7
  • Mahara » Mahara » Version: 15.10.0
    cpe:2.3:a:mahara:mahara:15.10.0
  • Mahara » Mahara » Version: 15.10.1
    cpe:2.3:a:mahara:mahara:15.10.1
  • Mahara » Mahara » Version: 15.10.2
    cpe:2.3:a:mahara:mahara:15.10.2
  • Mahara » Mahara » Version: 15.10.3
    cpe:2.3:a:mahara:mahara:15.10.3
  • Mahara » Mahara » Version: 16.04
    cpe:2.3:a:mahara:mahara:16.04
  • Mahara » Mahara » Version: 16.04.0
    cpe:2.3:a:mahara:mahara:16.04.0
  • Mahara » Mahara » Version: 16.04.1
    cpe:2.3:a:mahara:mahara:16.04.1


Contact Us

Shodan ® - All rights reserved