CVE-2014-9753: Critical severity ATutor ATutor vulnerability
Published Feb 11, 2020
·Updated
confirm.php in ATutor 2.2 and earlier allows remote attackers to bypass authentication and gain access as an existing user via the autologin parameter.
Affected Software
1 affected component
ATutor ATutor<=2.2
Remediation
Event History
Feb 11, 2020
CVE Published
via MITRE·05:51 PM
Data Sourced
via MITRE·05:51 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2014-9753?
CVE-2014-9753 is considered a critical vulnerability due to its ability to allow remote attackers to bypass authentication.
2
How do I fix CVE-2014-9753?
To fix CVE-2014-9753, it is recommended to upgrade to a later version of ATutor beyond 2.2 that has addressed this vulnerability.
3
What does CVE-2014-9753 exploit?
CVE-2014-9753 exploits a flaw in the confirm.php file in ATutor that allows authentication bypass via the auto_login parameter.
4
Who is affected by CVE-2014-9753?
All installations of ATutor version 2.2 and earlier are affected by CVE-2014-9753.
5
What are the potential consequences of CVE-2014-9753?
The potential consequences of CVE-2014-9753 include unauthorized access to user accounts and compromised user data.