CVE-2017-1000143: Infoleak
First published: Fri Nov 03 2017(Updated: )
Mahara 1.8 before 1.8.7 and 1.9 before 1.9.5 and 1.10 before 1.10.3 and 15.04 before 15.04.0 are vulnerable to users receiving watchlist notifications about pages they do not have access to anymore.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Mahara Mahara | =1.8-rc1 | |
| Mahara Mahara | =1.8-rc2 | |
| Mahara Mahara | =1.8.0 | |
| Mahara Mahara | =1.8.1 | |
| Mahara Mahara | =1.8.2 | |
| Mahara Mahara | =1.8.3 | |
| Mahara Mahara | =1.8.4 | |
| Mahara Mahara | =1.8.5 | |
| Mahara Mahara | =1.8.6 | |
| Mahara Mahara | =1.9-rc1 | |
| Mahara Mahara | =1.9.0 | |
| Mahara Mahara | =1.9.1 | |
| Mahara Mahara | =1.9.2 | |
| Mahara Mahara | =1.9.3 | |
| Mahara Mahara | =1.9.4 | |
| Mahara Mahara | =1.10-rc1 | |
| Mahara Mahara | =1.10.0 | |
| Mahara Mahara | =1.10.1 | |
| Mahara Mahara | =1.10.2 | |
| Mahara Mahara | =15.04-rc1 | |
| Mahara Mahara | =15.04-rc2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is Mahara vulnerability CVE-2017-1000143?
Mahara 1.8 before 1.8.7 and 1.9 before 1.9.5 and 1.10 before 1.10.3 and 15.04 before 15.04.0 are vulnerable to users receiving watchlist notifications about pages they do not have access to anymore.
How severe is Mahara vulnerability CVE-2017-1000143?
The severity of Mahara vulnerability CVE-2017-1000143 is medium with a CVSS score of 4.3.
How can I fix Mahara vulnerability CVE-2017-1000143?
To fix Mahara vulnerability CVE-2017-1000143, upgrade to Mahara version 1.8.7, 1.9.5, 1.10.3, or 15.04.0.
Where can I find more information about Mahara vulnerability CVE-2017-1000143?
More information about Mahara vulnerability CVE-2017-1000143 can be found at the following link: [link](https://bugs.launchpad.net/mahara/+bug/1429647).
What is the CWE-ID associated with Mahara vulnerability CVE-2017-1000143?
The CWE-ID associated with Mahara vulnerability CVE-2017-1000143 is 200.
- collector/nvd-index
- agent/softwarecombine
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/author
- agent/weakness
- agent/remedy
- agent/references
- agent/severity
- agent/tags
- agent/description
- agent/first-publish-date
- agent/event
- vendor/mahara
- canonical/mahara mahara
- version/mahara mahara/1.8-rc1
- version/mahara mahara/1.8-rc2
- version/mahara mahara/1.8.0
- version/mahara mahara/1.8.1
- version/mahara mahara/1.8.2
- version/mahara mahara/1.8.3
- version/mahara mahara/1.8.4
- version/mahara mahara/1.8.5
- version/mahara mahara/1.8.6
- version/mahara mahara/1.9-rc1
- version/mahara mahara/1.9.0
- version/mahara mahara/1.9.1
- version/mahara mahara/1.9.2
- version/mahara mahara/1.9.3
- version/mahara mahara/1.9.4
- version/mahara mahara/1.10-rc1
- version/mahara mahara/1.10.0
- version/mahara mahara/1.10.1
- version/mahara mahara/1.10.2
- version/mahara mahara/15.04-rc1
- version/mahara mahara/15.04-rc2