CVE-2009-2171

CVSS 4.0 - MEDIUM

Description

Mahara 1.1 before 1.1.5 does not apply permission checks when saving a view that contains artefacts, which allows remote authenticated users to read another user's artefact.

Affected Products

Vendor	Product	Version
mahara	mahara	`1.1`
mahara	mahara	`1.1.1`
mahara	mahara	`1.1.2`
mahara	mahara	`1.1.3`
mahara	mahara	`1.1.4`

References

http://mahara.org/interaction/forum/topic.php?id=7...

Weakness Types

CWE-264

CVE Information

CVE ID:: CVE-2009-2171
Published:: 2009-06-23
Modified:: 2026-04-23
CVSS Score:: 4.0
Severity:: MEDIUM
Vector:: AV:N/AC:L/Au:S/C:P/I:N/A:N

Affected Vendors

mahara

Quick Actions

View on NVD Find Similar CVEs

CVSS Severity Scale

0.0 - 3.9 LOW

4.0 - 6.9 MEDIUM

7.0 - 8.9 HIGH

9.0 - 10.0 CRITICAL