PT-2017-10714 · Atutorspaces · Atutor

Published 2017-07-13 · Updated 2019-10-03 · CVE-2017-1000003

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ATutor versions 2.2.1 and earlier

Description The issue is related to an incorrect access control check vulnerability, which results in privilege escalation. This vulnerability is present in multiple components, including the Social Application, Module, and Alternative Content components.

Recommendations For ATutor versions 2.2.1 and earlier, update to a version that includes the necessary access control checks to prevent privilege escalation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

CVE-2017-1000003

Affected Products

Atutor

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2017-1000003 · Security Note
• https://osv.dev/vulnerability/CVE-2017-1000003 · Vendor Advisory
• http://atutor.ca/atutor/mantis/view.php?id=5681 · Note
• http://securityfocus.com/bid/99599 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000003 · Note
• http://atutor.ca/atutor/mantis/changelog_page.php?version_id=55 · Note