Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2017-1000156

Mahara 15.04 before 15.04.9 and 15.10 before 15.10.5 and 16.04 before 16.04.3 are vulnerable to a group's configuration page being editable by any group member even when they didn't have the admin role.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 48.6%
CVSS Severity
CVSS v3 Score 6.5
CVSS v2 Score 5.5
Products affected by CVE-2017-1000156
  • Mahara » Mahara » Version: 15.04
    cpe:2.3:a:mahara:mahara:15.04
  • Mahara » Mahara » Version: 15.04.0
    cpe:2.3:a:mahara:mahara:15.04.0
  • Mahara » Mahara » Version: 15.04.1
    cpe:2.3:a:mahara:mahara:15.04.1
  • Mahara » Mahara » Version: 15.04.2
    cpe:2.3:a:mahara:mahara:15.04.2
  • Mahara » Mahara » Version: 15.04.3
    cpe:2.3:a:mahara:mahara:15.04.3
  • Mahara » Mahara » Version: 15.04.4
    cpe:2.3:a:mahara:mahara:15.04.4
  • Mahara » Mahara » Version: 15.04.5
    cpe:2.3:a:mahara:mahara:15.04.5
  • Mahara » Mahara » Version: 15.04.6
    cpe:2.3:a:mahara:mahara:15.04.6
  • Mahara » Mahara » Version: 15.04.7
    cpe:2.3:a:mahara:mahara:15.04.7
  • Mahara » Mahara » Version: 15.04.8
    cpe:2.3:a:mahara:mahara:15.04.8
  • Mahara » Mahara » Version: 15.10.0
    cpe:2.3:a:mahara:mahara:15.10.0
  • Mahara » Mahara » Version: 15.10.1
    cpe:2.3:a:mahara:mahara:15.10.1
  • Mahara » Mahara » Version: 15.10.2
    cpe:2.3:a:mahara:mahara:15.10.2
  • Mahara » Mahara » Version: 15.10.3
    cpe:2.3:a:mahara:mahara:15.10.3
  • Mahara » Mahara » Version: 15.10.4
    cpe:2.3:a:mahara:mahara:15.10.4
  • Mahara » Mahara » Version: 16.04
    cpe:2.3:a:mahara:mahara:16.04
  • Mahara » Mahara » Version: 16.04.0
    cpe:2.3:a:mahara:mahara:16.04.0
  • Mahara » Mahara » Version: 16.04.1
    cpe:2.3:a:mahara:mahara:16.04.1
  • Mahara » Mahara » Version: 16.04.2
    cpe:2.3:a:mahara:mahara:16.04.2


Contact Us

Shodan ® - All rights reserved