← Back

CVE-2009-2171

nvd nist
Published: Jun 23, 2009Modified: Apr 23, 2026

JSON object

Loading...
4.0
Vector
AV:N/AC:L/Au:S/C:P/I:N/A:N
Exploitability: 8.0 / Impact: 2.9
Source: NVD

Description

Mahara 1.1 before 1.1.5 does not apply permission checks when saving a view that contains artefacts, which allows remote authenticated users to read another user's artefact.

Affected (5)

Products: Mahara: Mahara
1 product
Mahara
Configuration A
5 vulnerable
Vulnerable SoftwareAffected Versions
Mahara
Version 1.1.1
Version 1.1.2
Version 1.1.3
Version 1.1.4
Version 1.1

Related CWEs

References (2)

Source: cve@mitre.org
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.