CVE-2009-3298: Medium severity mahara vulnerability
Published Nov 3, 2009
·Updated
Mahara before 1.0.13, and 1.1.x before 1.1.7, allows remote authenticated institution administrators to reset a site administrator password via unspecified vectors.
Affected Software
28 affected components
Mahara Mahara=1.1.0-beta4
Mahara Mahara=1.1.6
Mahara Mahara=1.1.2
Mahara Mahara=1.0.4
Mahara Mahara=1.0.1
Mahara Mahara=1.0.8
Mahara Mahara=1.0.6
Mahara Mahara=1.0.5
Mahara Mahara=1.1.0-alpha3
Mahara Mahara=1.1.4
Mahara Mahara=1.0.2
Mahara Mahara=1.1.0-beta1
Mahara Mahara=1.0.3
Mahara Mahara=1.0.10
Mahara Mahara=1.1.0-rc2
Mahara Mahara=1.1.1
Mahara Mahara=1.1.0-beta3
Mahara Mahara=1.1.0-alpha1
Mahara Mahara<=1.0.12
Mahara Mahara=1.1.0-alpha2
Mahara Mahara=1.1.3
Mahara Mahara=1.0.7
Mahara Mahara=1.0.0
Mahara Mahara=1.1.0
Mahara Mahara=1.1.5
Mahara Mahara=1.1.0-beta2
Mahara Mahara=1.1.0-rc1
Mahara Mahara=1.0.11
Remediation
Patch Available
Patch Available
Patch Available
Event History
Nov 3, 2009
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2009-3298?
CVE-2009-3298 has been classified as medium severity due to its potential impact on site administrator accounts.
2
How do I fix CVE-2009-3298?
To fix CVE-2009-3298, upgrade Mahara to version 1.0.13 or 1.1.7 or later.
3
Which versions are affected by CVE-2009-3298?
CVE-2009-3298 affects Mahara versions prior to 1.0.13 and 1.1.x before 1.1.7.
4
Who can exploit CVE-2009-3298?
CVE-2009-3298 can be exploited by remote authenticated institution administrators.
5
What type of vulnerability is CVE-2009-3298?
CVE-2009-3298 is a privilege escalation vulnerability allowing unauthorized password resets.