CVE-2017-17455

Mahara 16.10 before 16.10.7, 17.04 before 17.04.5, and 17.10 before 17.10.2 are vulnerable to being forced, via a man-in-the-middle attack, to interact with…

published February 20, 2018

CVSS
—
EPSS
1%
Percentile
48.3
In the wild
Unconfirmed
What it is

Mahara 16.10 before 16.10.7, 17.04 before 17.04.5, and 17.10 before 17.10.2 are vulnerable to being forced, via a man-in-the-middle attack, to interact with Mahara on the HTTP protocol rather than HTTPS even when an SSL certificate is present.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00605 · 48.3th percentile
Published
2018-02-20T22:00Z
EPSS history
Timeline
  • 20 FEB 22:00Z
    Mahara 16.10 before 16.10.7, 17.04 before 17.04.5, and 17.10 before 17.10.2 are vulnerable to being forced, via a man-in-the-middle attack, to interact with…
    cvelistv5