CVE-2021-43498: High severity atutor achecker vulnerability
Published Apr 8, 2022
·Updated
An Access Control vulnerability exists in ATutor 2.2.4 in passwordreminder.php when the g, id, h, formpasswordhidden, and formchange HTTP POST parameters are set.
Affected Software
1 affected component
ATutor ATutor=2.2.4
Event History
Apr 8, 2022
CVE Published
via MITRE·06:06 PM
Data Sourced
via MITRE·06:06 PM
Description
Frequently Asked Questions
1
What is the vulnerability ID for this ATutor Access Control vulnerability?
The vulnerability ID for this ATutor Access Control vulnerability is CVE-2021-43498.
2
What is the severity of CVE-2021-43498?
The severity of CVE-2021-43498 is high with a CVSS score of 7.5.
3
Which software version is affected by CVE-2021-43498?
ATutor 2.2.4 is affected by CVE-2021-43498.
4
How does the vulnerability manifest in ATutor 2.2.4?
The vulnerability manifests in ATutor 2.2.4 in password_reminder.php when specific HTTP POST parameters are set.
5
Is there a fix available for CVE-2021-43498?
Yes, a fix is available for CVE-2021-43498. It is recommended to update to a version that has addressed this vulnerability.