CVE-2017-1000150

Mahara 15.04 before 15.04.7 and 15.10 before 15.10.3 are vulnerable to prevent session IDs from being regenerated on login or logout. This makes users of the site more vulnerable to session fixation attacks.

Score

CVSS 3.0 8.8 High

Status

Modified - cve@mitre.org

Published

2017-11-03

Last modified

2024-08-05

Weaknesses

CWE-384

Affected products

• Mahara (Mahara)

References

• https://bugs.launchpad.net/mahara/+bug/1567784