CVE-2011-1402: Medium severity mahara vulnerability
Mahara before 1.3.6 allows remote authenticated users to bypass intended access restrictions, and suspend a user account, edit a view, visit a view, edit a plan artefact, read a plans block, read a plan artefact, edit a blog, read a blog block, read a blog artefact, or access a block, via a request associated with (1) admin/users/search.json.php, (2) view/newviewtoken.json.php, (3) lib/mahara.php, (4) artefact/plans/tasks.json.php, (5) artefact/plans/viewtasks.json.php, (6) artefact/blog/view/index.json.php, (7) artefact/blog/posts.json.php, or (8) blocktype/myfriends/myfriends.json.php, related to incorrect privilege enforcement, a missing user id check, and incorrect enforcement of the Overriding Start/Stop Dates setting.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Patch Available
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2011-1402?
CVE-2011-1402 is categorized as a moderate severity vulnerability due to its potential to allow unauthorized access and manipulation of user accounts and content.
How do I fix CVE-2011-1402?
To fix CVE-2011-1402, upgrade Mahara to version 1.3.6 or later, which addresses this vulnerability.
What versions of Mahara are affected by CVE-2011-1402?
CVE-2011-1402 affects Mahara versions prior to 1.3.6 including versions from 1.0.0 up to 1.3.5.
Can CVE-2011-1402 be exploited remotely?
Yes, CVE-2011-1402 can be exploited remotely by authenticated users to bypass access restrictions.
What are the implications of CVE-2011-1402?
The implications of CVE-2011-1402 include the risk of unauthorized users being able to edit or view content they should not have access to, potentially leading to information leakage or data integrity issues.