PT-2017-10714 · Atutorspaces · Atutor

Publicado 2017-07-13 · Atualizado 2019-10-03 · CVE-2017-1000003

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ATutor versions 2.2.1 and earlier

Description The issue is related to an incorrect access control check vulnerability, which results in privilege escalation. This vulnerability is present in multiple components, including the Social Application, Module, and Alternative Content components.

Recommendations For ATutor versions 2.2.1 and earlier, update to a version that includes the necessary access control checks to prevent privilege escalation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Privilege Management

Enumeração de Fraquezas

CWE-269

Identificadores relacionados

CVE-2017-1000003

Produtos afetados

Atutor

Referências · 6

• https://nvd.nist.gov/vuln/detail/CVE-2017-1000003 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2017-1000003 · Aviso do Fabricante
• http://atutor.ca/atutor/mantis/view.php?id=5681 · Nota
• http://securityfocus.com/bid/99599 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000003 · Nota
• http://atutor.ca/atutor/mantis/changelog_page.php?version_id=55 · Nota