CVE-2011-1404
Mahara before 1.3.6 does not properly restrict the data in responses to AJAX calls, which allows remote authenticated users to obtain sensitive information via a request associated with (1) blocktype/myfriends/myfriends.json.php, (2)…
Does this matter?
Lower severity and a low EPSS score (2.04%). Track it; it rarely justifies an emergency change on its own.
Description
Mahara before 1.3.6 does not properly restrict the data in responses to AJAX calls, which allows remote authenticated users to obtain sensitive information via a request associated with (1) blocktype/myfriends/myfriends.json.php, (2) json/usersearch.php, (3) group/membersearchresults.json.php, or (4) json/friendsearch.php, as demonstrated by information about friends and e-mail addresses.
- CVSS 2.0
- 4.0 MEDIUMAV:N/AC:L/Au:S/C:P/I:N/A:N
- EPSS
- 2.04% probability · 80th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-264
- Affected
- mahara/mahara
- Source
- cve@mitre.org
References
- http://secunia.com/advisories/44433Vendor Advisory
- http://www.debian.org/security/2011/dsa-2246
- http://www.securityfocus.com/bid/47798
- https://exchange.xforce.ibmcloud.com/vulnerabilities/67395
- https://launchpad.net/mahara/+bug/772140Patch
- https://launchpad.net/mahara/+bug/772160Patch
- https://launchpad.net/mahara/+bug/772174Patch
- https://launchpad.net/mahara/+bug/772179Patch
- https://launchpad.net/mahara/+milestone/1.3.6Patch
- http://secunia.com/advisories/44433Vendor Advisory
- http://www.debian.org/security/2011/dsa-2246
- http://www.securityfocus.com/bid/47798
- https://exchange.xforce.ibmcloud.com/vulnerabilities/67395
- https://launchpad.net/mahara/+bug/772140Patch
- https://launchpad.net/mahara/+bug/772160Patch
- https://launchpad.net/mahara/+bug/772174Patch
- https://launchpad.net/mahara/+bug/772179Patch
- https://launchpad.net/mahara/+milestone/1.3.6Patch
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.