CVE-2017-1000152 | BDVDB-2026-92566 Detail

Description#

Mahara 15.04 before 15.04.7 and 15.10 before 15.10.3 running PHP 5.3 are vulnerable to one user being logged in as another user on a separate computer as the same session ID is served. This situation can occur when a user takes an action that forces another user to be logged out of Mahara, such as an admin changing another user's account settings.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12017-11-03Record published in the CVE List.
2. Version 22024-08-05Most recent update recorded in the CVE List.