← Back

CVE-2017-1000157

nvd nist
Published: Nov 3, 2017Modified: May 13, 2026

JSON object

Loading...
4.4
Vector
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N
Exploitability: 0.7 / Impact: 3.6
Source: NVD

Description

Mahara 15.04 before 15.04.13 and 16.04 before 16.04.7 and 16.10 before 16.10.4 and 17.04 before 17.04.2 are vulnerable to recording plain text passwords in the event_log table during the user creation process if full event logging was turned on.

Affected (34)

Products: Mahara: Mahara
Mahara
1 product
Mahara
Configuration A
15 vulnerable
Vulnerable SoftwareAffected Versions
Mahara
Mahara
Version 15.04.0
Mahara
Version 15.04.10
Mahara
Version 15.04.11
Mahara
Version 15.04.12
Mahara
Version 15.04.1
Mahara
Version 15.04.2
Mahara
Version 15.04.3
Mahara
Version 15.04.4
Mahara
Version 15.04.5
Mahara
Version 15.04.6
Mahara
Version 15.04.7
Mahara
Version 15.04.8
Mahara
Version 15.04.9
Mahara
Version 15.04 rc1
Mahara
Version 15.04 rc2
Configuration B
9 vulnerable
Vulnerable SoftwareAffected Versions
Mahara
Mahara
Version 16.04.0
Mahara
Version 16.04.1
Mahara
Version 16.04.2
Mahara
Version 16.04.3
Mahara
Version 16.04.4
Mahara
Version 16.04.5
Mahara
Version 16.04.6
Mahara
Version 16.04 rc1
Mahara
Version 16.04 rc2
Configuration C
6 vulnerable
Vulnerable SoftwareAffected Versions
Mahara
Mahara
Version 16.10.0
Mahara
Version 16.10.1
Mahara
Version 16.10.2
Mahara
Version 16.10.3
Mahara
Version 16.10 rc1
Mahara
Version 16.10 rc2
Configuration D
4 vulnerable
Vulnerable SoftwareAffected Versions
Mahara
Mahara
Version 17.04.0
Mahara
Version 17.04.1
Mahara
Version 17.04 rc1
Mahara
Version 17.04 rc2

Related CWEs

CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (2)

Source: cve@mitre.org
ExploitIssue TrackingPatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitIssue TrackingPatchThird Party Advisory

Timeline

No history available yet.