CVE-2017-1000150 | BDVDB-2026-92564 Detail

Description#

Mahara 15.04 before 15.04.7 and 15.10 before 15.10.3 are vulnerable to prevent session IDs from being regenerated on login or logout. This makes users of the site more vulnerable to session fixation attacks.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://bugs.launchpad.net/mahara/+bug/1567784

Exploit#

No public exploit known

History#

Version 12017-11-03Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.