NVD

Id
40036  
Name
CVE-2013-4429  
Description
Mahara before 1.5.12, 1.6.x before 1.6.7, and 1.7.x before 1.7.3 does not properly restrict access to artefacts, which allows remote authenticated users to read arbitrary artefacts via the (1) artefact id in an upload action when creating a journal or (2) instconf_artefactid_selected[ID] parameter in an upload action when editing a block.  
Reject
 
CVSS Version
2  
CVSS Score
4  
Severity
Medium  
CVSS Base Score
4  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:P/I:N/A:N)  
Pub Date
2017-01-18  
Published
2014-05-19  
Modified Date
2014-05-19  
Seq
2013-4429  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
203691 40036 CVE-2013-4429 [oss-security] 20131008 CVE request: mahara 1.7.3  View
203692 40036 CVE-2013-4429 [oss-security] 20131015 Re: CVE request: mahara 1.7.3  View
203693 40036 CVE-2013-4429 [oss-security] 20131015 Re: Re: CVE request: mahara 1.7.3  View
203694 40036 CVE-2013-4429 https://bugs.launchpad.net/mahara/+bug/1211758  View
203695 40036 CVE-2013-4429 https://mahara.org/interaction/forum/topic.php?id=5753  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
24893 JVNDB-2013-006468 Mahara における任意のアーティファクトを読まれる脆弱性 Mahara は、アーティファクトへのアクセスを適切に制限しないため、任意のアーティファクトを読まれる脆弱性が存在します。 CVE-2013-4429 64371 CVE-2013-4429 40036 4 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-006468.html 2013-10-03 2014-05-20 View