ByteOS Network

NVD Vulnerability Details :

CVE-2018-11565

Analyzed

Source-cve@mitre.org

Published At-30 May, 2018 | 21:29

Updated At-03 Jul, 2018 | 13:53

Mahara 17.04 before 17.04.8 and 17.10 before 17.10.5 and 18.04 before 18.04.1 are vulnerable to mentioning the usernames that are already taken by people registered in the system rather than masking that information.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.0	5.3	MEDIUM	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Primary	2.0	5.0	MEDIUM	AV:N/AC:L/Au:N/C:P/I:N/A:N

CPE Matches

Mahara

>>mahara>>Versions from 17.04.0(inclusive) to 17.04.8(exclusive)

cpe:2.3:a:mahara:mahara:*:*:*:*:*:*:*:*

Mahara

>>mahara>>Versions from 17.10.0(inclusive) to 17.10.5(exclusive)

cpe:2.3:a:mahara:mahara:*:*:*:*:*:*:*:*

Mahara

>>mahara>>18.04.0

cpe:2.3:a:mahara:mahara:18.04.0:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-200	Primary	nvd@nist.gov

References

Hyperlink	Source	Resource
https://bugs.launchpad.net/mahara/+bug/1772774	cve@mitre.org	Issue Tracking Patch Vendor Advisory
https://mahara.org/interaction/forum/topic.php?id=8271	cve@mitre.org	Vendor Advisory

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History