CVE-2017-14163

See a problem?
Source
https://nvd.nist.gov/vuln/detail/CVE-2017-14163
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-14163.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2017-14163
Published
2017-10-31T18:29:00Z
Modified
2024-09-03T01:42:14.872305Z
Severity
  • 8.8 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

An issue was discovered in Mahara before 15.04.14, 16.x before 16.04.8, 16.10.x before 16.10.5, and 17.x before 17.04.3. When one closes the browser without logging out of Mahara, the value in the usr_session table is not removed. If someone were to open a browser, visit the Mahara site, and adjust the 'mahara' cookie to the old value, they can get access to the user's account.

References

Affected packages

Git / github.com/maharaproject/mahara

Affected ranges

Type
GIT
Repo
https://github.com/maharaproject/mahara
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
04c27e5d4b28b520e4d9e874610b15b7dc54c74e
Last affected
0526e945057759b75205da13b71eac9703a8ab18
Last affected
131e345b6847f10cb4a59ca4c748224d8bbe3cab
Last affected
2d4a3b547ca5aa058a975f870f21ddf64fc840db
Last affected
2e5d0ff8ba15844e22c1a4faaa3bd71263dff0bf
Last affected
39ac3f76ea3981e204aca4f25a6d60bd988094f0
Last affected
3b3d3e3cd03d1663da0b0e3826fcdff13f488886
Last affected
3b8f64ffc6b13d72ac52c05192d357d1cebd1737
Last affected
44ebd0f0993352955f7971920fa8ca231e6a8bb9
Last affected
469428cf55bae3fc3dafdc8848a85ddb557815a6
Last affected
47f037064b8185131aae429305098113ad679421
Last affected
48a238a2f76a7ea322580fe93b7c026becd9acce
Last affected
53ee40015a2363a6c5c3d3cccc3fb35e27a7abb0
Last affected
5b13e9ab0a021f86889a39cf45b413384009a4ab
Last affected
6151bb5fea5811277d051a81865b946d76a92fba
Last affected
71a160b12bcde1bd3569377c8e010436228aaf5f
Last affected
734d408f59db38b464f616fbfb377fcddf522d4a
Last affected
76a6b2398e4d49c94d14103208a4c406f1e1a1a0
Last affected
7bd5d2814970330a905d5e604e7cfa185d79f30d
Last affected
7dddee6b891847be8d953de8ea98f9fd802042df
Last affected
80673cb4210bef8ec2592cd1bd6e59192373d66b
Last affected
850a663a5e911e819a8216a9405d84ea3cf3cdab
Last affected
8b133e5b26e79f9b6bac51b6309a95262b1f3840
Last affected
8e6393cff844671df756f594f4857df454364a4b
Last affected
8f8c729b91c4db1b11a43ed9248385702608e6db
Last affected
9b217d5c0da7118a8c9d668794a3869d85276534
Last affected
a5fec14685428f641abd61cb6a1d8554e1790a16
Last affected
ae97c08cc818688980444c713d5573b5cd6a610a
Last affected
afb32f27e0ab32b46952ee043c169b34eec5a1d0
Last affected
bc9308e5d855dc04dc81990c2901b6e0b6e98102
Last affected
bc9bfdeea2193f5911209481176c4672c38339e8
Last affected
c1b8e4e448228b12a674c205a7288389613271e7
Last affected
c31365682523aa25abff879b5820f21515909fcf
Last affected
c3601dde87abf89382c8b3ac74d500b5e636560a
Last affected
c4f30a389c34a2177a7f2aa60a69b2494c5f08fa
Last affected
d527a5edeb6087fd94956e1e3e18bcf4a432540d
Last affected
eea43577f7952fcfef7cbaf61b87cce1bdcdb8dd
Last affected
eef4f191c63bfba0883f37410de72d54cfb4f13d

Affected versions

1.*

1.0.0ALPHA1_RELEASE
1.0.0ALPHA2_RELEASE
1.0.0BETA1_RELEASE
1.0.0BETA2_RELEASE
1.1.0ALPHA1_RELEASE
1.1.0ALPHA2_RELEASE
1.1.0ALPHA3_RELEASE
1.1.0BETA1_RELEASE
1.1.0BETA2_RELEASE
1.1.0BETA3_RELEASE
1.1.0BETA4_RELEASE
1.2.0ALPHA1_RELEASE
1.2.0ALPHA2_RELEASE
1.2.0ALPHA3_RELEASE
1.2.0BETA1_RELEASE
1.2.0BETA2_RELEASE
1.2.0BETA3_RELEASE
1.2.0BETA4_RELEASE
1.2.0RC1_RELEASE
1.3.0BETA1_RELEASE
1.3.0BETA2_RELEASE
1.3.0BETA3_RELEASE
1.3.0BETA4_RELEASE
1.4.0ALPHA1_RELEASE
1.7RC1_RELEASE
1.8RC1_RELEASE
1.8RC2_RELEASE

15.*

15.04.0_RELEASE
15.04.10_RELEASE
15.04.11_RELEASE
15.04.12_RELEASE
15.04.1_RELEASE
15.04.2_RELEASE
15.04.3_RELEASE
15.04.4_RELEASE
15.04.5_RELEASE
15.04.6_RELEASE
15.04.7_RELEASE
15.04.8_RELEASE
15.04.9_RELEASE
15.04RC1_RELEASE
15.04RC2_RELEASE

16.*

16.04RC1_RELEASE
16.04RC2_RELEASE
16.10.0_RELEASE
16.10RC1_RELEASE
16.10RC2_RELEASE

17.*

17.04.0_RELEASE
17.04.1_RELEASE
17.04RC1_RELEASE
17.04RC2_RELEASE