CVE-2017-1000157 - Vulnerability Details

Vendors	Products
Mahara	Mahara

Link	Providers
https://bugs.launchpad.net/mahara/+bug/1692749

Show plain JSON

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "dateAssigned": "2017-08-22T00:00:00", "datePublic": "2017-11-03T00:00:00", "descriptions": [{"lang": "en", "value": "Mahara 15.04 before 15.04.13 and 16.04 before 16.04.7 and 16.10 before 16.10.4 and 17.04 before 17.04.2 are vulnerable to recording plain text passwords in the event_log table during the user creation process if full event logging was turned on."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-11-03T17:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://bugs.launchpad.net/mahara/+bug/1692749"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "DATE_ASSIGNED": "2017-08-22T17:29:33.369977", "ID": "CVE-2017-1000157", "REQUESTER": "info@mahara.org", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Mahara 15.04 before 15.04.13 and 16.04 before 16.04.7 and 16.10 before 16.10.4 and 17.04 before 17.04.2 are vulnerable to recording plain text passwords in the event_log table during the user creation process if full event logging was turned on."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "https://bugs.launchpad.net/mahara/+bug/1692749", "refsource": "MISC", "url": "https://bugs.launchpad.net/mahara/+bug/1692749"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-05T21:53:07.011Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://bugs.launchpad.net/mahara/+bug/1692749"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2017-1000157", "datePublished": "2017-11-03T18:00:00", "dateReserved": "2017-11-02T00:00:00", "dateUpdated": "2024-08-05T21:53:07.011Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{

containers : { »

cna : { »

affected : [ »

0 : { »

product : n/a (string)

vendor : n/a (string)

versions : [ »

0 : { »

status : affected (string)

version : n/a (string)

}

]

}

]

dateAssigned : 2017-08-22T00:00:00 (string)

datePublic : 2017-11-03T00:00:00 (string)

descriptions : [ »

0 : { »

lang : en (string)

value : Mahara 15.04 before 15.04.13 and 16.04 before 16.04.7 and 16.10 before 16.10.4 and 17.04 before 17.04.2 are vulnerable to recording plain text passwords in the event_log table during the user creation process if full event logging was turned on. (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

description : n/a (string)

lang : en (string)

type : text (string)

}

]

}

]

providerMetadata : { »

dateUpdated : 2017-11-03T17:57:01 (string)

orgId : 8254265b-2729-46b6-b9e3-3dfca2d5bfca (string)

shortName : mitre (string)

}

references : [ »

0 : { »

tags : [ »

0 : x_refsource_MISC (string)

]

url : https://bugs.launchpad.net/mahara/+bug/1692749 (string)

}

]

x_legacyV4Record : { »

CVE_data_meta : { »

ASSIGNER : cve@mitre.org (string)

DATE_ASSIGNED : 2017-08-22T17:29:33.369977 (string)

ID : CVE-2017-1000157 (string)

REQUESTER : info@mahara.org (string)

STATE : PUBLIC (string)

}

affects : { »

vendor : { »

vendor_data : [ »

0 : { »

product : { »

product_data : [ »

0 : { »

product_name : n/a (string)

version : { »

version_data : [ »

0 : { »

version_value : n/a (string)

}

]

}

]

}

vendor_name : n/a (string)

}

]

}

data_format : MITRE (string)

data_type : CVE (string)

data_version : 4.0 (string)

description : { »

description_data : [ »

0 : { »

lang : eng (string)

value : Mahara 15.04 before 15.04.13 and 16.04 before 16.04.7 and 16.10 before 16.10.4 and 17.04 before 17.04.2 are vulnerable to recording plain text passwords in the event_log table during the user creation process if full event logging was turned on. (string)

}

]

}

problemtype : { »

problemtype_data : [ »

0 : { »

description : [ »

0 : { »

lang : eng (string)

value : n/a (string)

}

]

}

]

}

references : { »

reference_data : [ »

0 : { »

name : https://bugs.launchpad.net/mahara/+bug/1692749 (string)

refsource : MISC (string)

url : https://bugs.launchpad.net/mahara/+bug/1692749 (string)

}

]

}

adp : [ »

0 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-05T21:53:07.011Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

tags : [ »

0 : x_refsource_MISC (string)

1 : x_transferred (string)

]

url : https://bugs.launchpad.net/mahara/+bug/1692749 (string)

}

]

}

]

}

cveMetadata : { »

assignerOrgId : 8254265b-2729-46b6-b9e3-3dfca2d5bfca (string)

assignerShortName : mitre (string)

cveId : CVE-2017-1000157 (string)

datePublished : 2017-11-03T18:00:00 (string)

dateReserved : 2017-11-02T00:00:00 (string)

dateUpdated : 2024-08-05T21:53:07.011Z (string)

state : PUBLISHED (string)

}

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:mahara:mahara:15.04:rc1:*:*:*:*:*:*", "matchCriteriaId": "DCE2F6EE-06BE-4665-BA7B-AB6C97DAE02D", "vulnerable": true}, {"criteria": "cpe:2.3:a:mahara:mahara:15.04:rc2:*:*:*:*:*:*", "matchCriteriaId": "313A5DDA-204F-4ED3-BE22-FA0D8A239BC7", "vulnerable": true}, {"criteria": "cpe:2.3:a:mahara:mahara:15.04.0:*:*:*:*:*:*:*", "matchCriteriaId": "6932E7F9-BA51-4099-8987-8944E0284B7B", "vulnerable": true}, {"criteria": "cpe:2.3:a:mahara:mahara:15.04.1:*:*:*:*:*:*:*", "matchCriteriaId": "022D7031-54EF-484C-B076-15C4342532E3", "vulnerable": true}, {"criteria": "cpe:2.3:a:mahara:mahara:15.04.2:*:*:*:*:*:*:*", "matchCriteriaId": "6FFB08C5-151E-49D2-AC13-1018FF402569", "vulnerable": true}, {"criteria": "cpe:2.3:a:mahara:mahara:15.04.3:*:*:*:*:*:*:*", "matchCriteriaId": "853E7231-70C7-4A1F-817F-E43D78BCB060", "vulnerable": true}, {"criteria": "cpe:2.3:a:mahara:mahara:15.04.4:*:*:*:*:*:*:*", "matchCriteriaId": "96E14503-4E8B-44F5-9CAB-EF074CA71862", "vulnerable": true}, {"criteria": "cpe:2.3:a:mahara:mahara:15.04.5:*:*:*:*:*:*:*", "matchCriteriaId": "9AD7E980-E0C1-44D1-AFDE-F47CE3A48C71", "vulnerable": true}, {"criteria": "cpe:2.3:a:mahara:mahara:15.04.6:*:*:*:*:*:*:*", "matchCriteriaId": "9C9623EF-7C2D-4A58-AF56-DBD8707CC9EE", "vulnerable": true}, {"criteria": "cpe:2.3:a:mahara:mahara:15.04.7:*:*:*:*:*:*:*", "matchCriteriaId": "00782DDD-90C9-410F-A810-F5632AD25132", "vulnerable": true}, {"criteria": "cpe:2.3:a:mahara:mahara:15.04.8:*:*:*:*:*:*:*", "matchCriteriaId": "EC2D2EDD-0072-45A5-9FF6-BF4616109DE6", "vulnerable": true}, {"criteria": "cpe:2.3:a:mahara:mahara:15.04.9:*:*:*:*:*:*:*", "matchCriteriaId": "8ECDD170-7B22-4F4E-AF8C-BF7698A92FBA", "vulnerable": true}, {"criteria": "cpe:2.3:a:mahara:mahara:15.04.10:*:*:*:*:*:*:*", "matchCriteriaId": "E5FF82A5-DF51-4719-9940-85A0E4AF4626", "vulnerable": true}, {"criteria": "cpe:2.3:a:mahara:mahara:15.04.11:*:*:*:*:*:*:*", "matchCriteriaId": "3605A76D-1C09-4998-B387-FE7BED77B2B7", "vulnerable": true}, {"criteria": "cpe:2.3:a:mahara:mahara:15.04.12:*:*:*:*:*:*:*", "matchCriteriaId": "DF0D2C52-AFA4-4C35-8D8A-76AB94292E4C", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:mahara:mahara:16.04:rc1:*:*:*:*:*:*", "matchCriteriaId": "C1C7261F-8712-4405-A1C0-C36FD9BE64EF", "vulnerable": true}, {"criteria": "cpe:2.3:a:mahara:mahara:16.04:rc2:*:*:*:*:*:*", "matchCriteriaId": "74C6846C-42FB-454E-B4BA-0DAA43C1A0C3", "vulnerable": true}, {"criteria": "cpe:2.3:a:mahara:mahara:16.04.0:*:*:*:*:*:*:*", "matchCriteriaId": "6C6F378F-9282-46B4-BF84-B08418C2B592", "vulnerable": true}, {"criteria": "cpe:2.3:a:mahara:mahara:16.04.1:*:*:*:*:*:*:*", "matchCriteriaId": "28E5C4FE-5195-40FA-8580-2AF84D370B2F", "vulnerable": true}, {"criteria": "cpe:2.3:a:mahara:mahara:16.04.2:*:*:*:*:*:*:*", "matchCriteriaId": "BB5A96D5-CF12-470B-8ADE-183F09D57262", "vulnerable": true}, {"criteria": "cpe:2.3:a:mahara:mahara:16.04.3:*:*:*:*:*:*:*", "matchCriteriaId": "76D70CE2-AEA2-47B0-83D6-3F8A6E949D7A", "vulnerable": true}, {"criteria": "cpe:2.3:a:mahara:mahara:16.04.4:*:*:*:*:*:*:*", "matchCriteriaId": "D9BD9F88-E643-4CF5-A426-82B2D6133F7E", "vulnerable": true}, {"criteria": "cpe:2.3:a:mahara:mahara:16.04.5:*:*:*:*:*:*:*", "matchCriteriaId": "77F2D3A9-81B1-42E3-AF72-FBA985C48650", "vulnerable": true}, {"criteria": "cpe:2.3:a:mahara:mahara:16.04.6:*:*:*:*:*:*:*", "matchCriteriaId": "D050E953-88B1-40F7-98A8-B6A026292B2C", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:mahara:mahara:16.10:rc1:*:*:*:*:*:*", "matchCriteriaId": "0C590A8C-43CB-4B22-9F33-FD8BB01DCF5E", "vulnerable": true}, {"criteria": "cpe:2.3:a:mahara:mahara:16.10:rc2:*:*:*:*:*:*", "matchCriteriaId": "1F4DF3D9-A46D-4933-84FB-8179651C5B3D", "vulnerable": true}, {"criteria": "cpe:2.3:a:mahara:mahara:16.10.0:*:*:*:*:*:*:*", "matchCriteriaId": "5D642FA0-D977-4157-B379-3BBA86D80D99", "vulnerable": true}, {"criteria": "cpe:2.3:a:mahara:mahara:16.10.1:*:*:*:*:*:*:*", "matchCriteriaId": "57D2BD22-57F7-4594-AE5F-426AA1D74BFD", "vulnerable": true}, {"criteria": "cpe:2.3:a:mahara:mahara:16.10.2:*:*:*:*:*:*:*", "matchCriteriaId": "C5712D88-9218-4E7D-977C-07755D1B0D8D", "vulnerable": true}, {"criteria": "cpe:2.3:a:mahara:mahara:16.10.3:*:*:*:*:*:*:*", "matchCriteriaId": "4EA26090-2ED4-453D-85AA-46ED4E00DFE4", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:mahara:mahara:17.04:rc1:*:*:*:*:*:*", "matchCriteriaId": "0E4968B1-0D09-4449-B2A8-22B8C4B4346D", "vulnerable": true}, {"criteria": "cpe:2.3:a:mahara:mahara:17.04:rc2:*:*:*:*:*:*", "matchCriteriaId": "68A1A68E-704F-49C9-B07A-23C1B69A0966", "vulnerable": true}, {"criteria": "cpe:2.3:a:mahara:mahara:17.04.0:*:*:*:*:*:*:*", "matchCriteriaId": "26F30A3C-0BAA-45F8-A1D2-3FD8D381A1FB", "vulnerable": true}, {"criteria": "cpe:2.3:a:mahara:mahara:17.04.1:*:*:*:*:*:*:*", "matchCriteriaId": "262C2C07-CFDB-42A0-8896-758F1FF5BE93", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Mahara 15.04 before 15.04.13 and 16.04 before 16.04.7 and 16.10 before 16.10.4 and 17.04 before 17.04.2 are vulnerable to recording plain text passwords in the event_log table during the user creation process if full event logging was turned on."}, {"lang": "es", "value": "Mahara, en versiones 15.04 anteriores a la 15.04.13, versiones 16.04 anteriores a la 16.04.7, versiones 16.10 anteriores a la 16.10.4 y versiones 17.04 anteriores a la 17.04.2 es vulnerable a que se guarden contrase\u00f1as en texto plano en la tabla event_log durante el proceso de creaci\u00f3n de un usuario, si el registro de eventos completo estaba activado."}], "id": "CVE-2017-1000157", "lastModified": "2025-04-20T01:37:25.860", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "LOW", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "NONE", "baseScore": 3.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:S/C:P/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 6.8, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV30": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N", "version": "3.0"}, "exploitabilityScore": 0.7, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2017-11-03T18:29:01.167", "references": [{"source": "cve@mitre.org", "tags": ["Exploit", "Issue Tracking", "Patch", "Third Party Advisory"], "url": "https://bugs.launchpad.net/mahara/+bug/1692749"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit", "Issue Tracking", "Patch", "Third Party Advisory"], "url": "https://bugs.launchpad.net/mahara/+bug/1692749"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-200"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:mahara:mahara:15.04:rc1:*:*:*:*:*:* (string)

matchCriteriaId : DCE2F6EE-06BE-4665-BA7B-AB6C97DAE02D (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:a:mahara:mahara:15.04:rc2:*:*:*:*:*:* (string)

matchCriteriaId : 313A5DDA-204F-4ED3-BE22-FA0D8A239BC7 (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:a:mahara:mahara:15.04.0:*:*:*:*:*:*:* (string)

matchCriteriaId : 6932E7F9-BA51-4099-8987-8944E0284B7B (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:a:mahara:mahara:15.04.1:*:*:*:*:*:*:* (string)

matchCriteriaId : 022D7031-54EF-484C-B076-15C4342532E3 (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:a:mahara:mahara:15.04.2:*:*:*:*:*:*:* (string)

matchCriteriaId : 6FFB08C5-151E-49D2-AC13-1018FF402569 (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:a:mahara:mahara:15.04.3:*:*:*:*:*:*:* (string)

matchCriteriaId : 853E7231-70C7-4A1F-817F-E43D78BCB060 (string)

vulnerable : true (boolean)

}

6 : { »

criteria : cpe:2.3:a:mahara:mahara:15.04.4:*:*:*:*:*:*:* (string)

matchCriteriaId : 96E14503-4E8B-44F5-9CAB-EF074CA71862 (string)

vulnerable : true (boolean)

}

7 : { »

criteria : cpe:2.3:a:mahara:mahara:15.04.5:*:*:*:*:*:*:* (string)

matchCriteriaId : 9AD7E980-E0C1-44D1-AFDE-F47CE3A48C71 (string)

vulnerable : true (boolean)

}

8 : { »

criteria : cpe:2.3:a:mahara:mahara:15.04.6:*:*:*:*:*:*:* (string)

matchCriteriaId : 9C9623EF-7C2D-4A58-AF56-DBD8707CC9EE (string)

vulnerable : true (boolean)

}

9 : { »

criteria : cpe:2.3:a:mahara:mahara:15.04.7:*:*:*:*:*:*:* (string)

matchCriteriaId : 00782DDD-90C9-410F-A810-F5632AD25132 (string)

vulnerable : true (boolean)

}

10 : { »

criteria : cpe:2.3:a:mahara:mahara:15.04.8:*:*:*:*:*:*:* (string)

matchCriteriaId : EC2D2EDD-0072-45A5-9FF6-BF4616109DE6 (string)

vulnerable : true (boolean)

}

11 : { »

criteria : cpe:2.3:a:mahara:mahara:15.04.9:*:*:*:*:*:*:* (string)

matchCriteriaId : 8ECDD170-7B22-4F4E-AF8C-BF7698A92FBA (string)

vulnerable : true (boolean)

}

12 : { »

criteria : cpe:2.3:a:mahara:mahara:15.04.10:*:*:*:*:*:*:* (string)

matchCriteriaId : E5FF82A5-DF51-4719-9940-85A0E4AF4626 (string)

vulnerable : true (boolean)

}

13 : { »

criteria : cpe:2.3:a:mahara:mahara:15.04.11:*:*:*:*:*:*:* (string)

matchCriteriaId : 3605A76D-1C09-4998-B387-FE7BED77B2B7 (string)

vulnerable : true (boolean)

}

14 : { »

criteria : cpe:2.3:a:mahara:mahara:15.04.12:*:*:*:*:*:*:* (string)

matchCriteriaId : DF0D2C52-AFA4-4C35-8D8A-76AB94292E4C (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

1 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:mahara:mahara:16.04:rc1:*:*:*:*:*:* (string)

matchCriteriaId : C1C7261F-8712-4405-A1C0-C36FD9BE64EF (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:a:mahara:mahara:16.04:rc2:*:*:*:*:*:* (string)

matchCriteriaId : 74C6846C-42FB-454E-B4BA-0DAA43C1A0C3 (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:a:mahara:mahara:16.04.0:*:*:*:*:*:*:* (string)

matchCriteriaId : 6C6F378F-9282-46B4-BF84-B08418C2B592 (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:a:mahara:mahara:16.04.1:*:*:*:*:*:*:* (string)

matchCriteriaId : 28E5C4FE-5195-40FA-8580-2AF84D370B2F (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:a:mahara:mahara:16.04.2:*:*:*:*:*:*:* (string)

matchCriteriaId : BB5A96D5-CF12-470B-8ADE-183F09D57262 (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:a:mahara:mahara:16.04.3:*:*:*:*:*:*:* (string)

matchCriteriaId : 76D70CE2-AEA2-47B0-83D6-3F8A6E949D7A (string)

vulnerable : true (boolean)

}

6 : { »

criteria : cpe:2.3:a:mahara:mahara:16.04.4:*:*:*:*:*:*:* (string)

matchCriteriaId : D9BD9F88-E643-4CF5-A426-82B2D6133F7E (string)

vulnerable : true (boolean)

}

7 : { »

criteria : cpe:2.3:a:mahara:mahara:16.04.5:*:*:*:*:*:*:* (string)

matchCriteriaId : 77F2D3A9-81B1-42E3-AF72-FBA985C48650 (string)

vulnerable : true (boolean)

}

8 : { »

criteria : cpe:2.3:a:mahara:mahara:16.04.6:*:*:*:*:*:*:* (string)

matchCriteriaId : D050E953-88B1-40F7-98A8-B6A026292B2C (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

2 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:mahara:mahara:16.10:rc1:*:*:*:*:*:* (string)

matchCriteriaId : 0C590A8C-43CB-4B22-9F33-FD8BB01DCF5E (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:a:mahara:mahara:16.10:rc2:*:*:*:*:*:* (string)

matchCriteriaId : 1F4DF3D9-A46D-4933-84FB-8179651C5B3D (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:a:mahara:mahara:16.10.0:*:*:*:*:*:*:* (string)

matchCriteriaId : 5D642FA0-D977-4157-B379-3BBA86D80D99 (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:a:mahara:mahara:16.10.1:*:*:*:*:*:*:* (string)

matchCriteriaId : 57D2BD22-57F7-4594-AE5F-426AA1D74BFD (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:a:mahara:mahara:16.10.2:*:*:*:*:*:*:* (string)

matchCriteriaId : C5712D88-9218-4E7D-977C-07755D1B0D8D (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:a:mahara:mahara:16.10.3:*:*:*:*:*:*:* (string)

matchCriteriaId : 4EA26090-2ED4-453D-85AA-46ED4E00DFE4 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

3 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:mahara:mahara:17.04:rc1:*:*:*:*:*:* (string)

matchCriteriaId : 0E4968B1-0D09-4449-B2A8-22B8C4B4346D (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:a:mahara:mahara:17.04:rc2:*:*:*:*:*:* (string)

matchCriteriaId : 68A1A68E-704F-49C9-B07A-23C1B69A0966 (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:a:mahara:mahara:17.04.0:*:*:*:*:*:*:* (string)

matchCriteriaId : 26F30A3C-0BAA-45F8-A1D2-3FD8D381A1FB (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:a:mahara:mahara:17.04.1:*:*:*:*:*:*:* (string)

matchCriteriaId : 262C2C07-CFDB-42A0-8896-758F1FF5BE93 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

]

cveTags : [ *empty* ]

descriptions : [ »

0 : { »

lang : en (string)

value : Mahara 15.04 before 15.04.13 and 16.04 before 16.04.7 and 16.10 before 16.10.4 and 17.04 before 17.04.2 are vulnerable to recording plain text passwords in the event_log table during the user creation process if full event logging was turned on. (string)

}

1 : { »

lang : es (string)

value : Mahara, en versiones 15.04 anteriores a la 15.04.13, versiones 16.04 anteriores a la 16.04.7, versiones 16.10 anteriores a la 16.10.4 y versiones 17.04 anteriores a la 17.04.2 es vulnerable a que se guarden contraseñas en texto plano en la tabla event_log durante el proceso de creación de un usuario, si el registro de eventos completo estaba activado. (string)

}

]

id : CVE-2017-1000157 (string)

lastModified : 2025-04-20T01:37:25.860 (string)

metrics : { »

cvssMetricV2 : [ »

0 : { »

acInsufInfo : false (boolean)

baseSeverity : LOW (string)

cvssData : { »

accessComplexity : MEDIUM (string)

accessVector : NETWORK (string)

authentication : SINGLE (string)

availabilityImpact : NONE (string)

baseScore : 3.5 (number)

confidentialityImpact : PARTIAL (string)

integrityImpact : NONE (string)

vectorString : AV:N/AC:M/Au:S/C:P/I:N/A:N (string)

version : 2.0 (string)

}

exploitabilityScore : 6.8 (number)

impactScore : 2.9 (number)

obtainAllPrivilege : false (boolean)

obtainOtherPrivilege : false (boolean)

obtainUserPrivilege : false (boolean)

source : nvd@nist.gov (string)

type : Primary (string)

userInteractionRequired : false (boolean)

}

]

cvssMetricV30 : [ »

0 : { »

cvssData : { »

attackComplexity : HIGH (string)

attackVector : NETWORK (string)

availabilityImpact : NONE (string)

baseScore : 4.4 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : HIGH (string)

integrityImpact : NONE (string)

privilegesRequired : HIGH (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N (string)

version : 3.0 (string)

}

exploitabilityScore : 0.7 (number)

impactScore : 3.6 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

published : 2017-11-03T18:29:01.167 (string)

references : [ »

0 : { »

source : cve@mitre.org (string)

tags : [ »

0 : Exploit (string)

1 : Issue Tracking (string)

2 : Patch (string)

3 : Third Party Advisory (string)

]

url : https://bugs.launchpad.net/mahara/+bug/1692749 (string)

}

1 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Exploit (string)

1 : Issue Tracking (string)

2 : Patch (string)

3 : Third Party Advisory (string)

]

url : https://bugs.launchpad.net/mahara/+bug/1692749 (string)

}

]

sourceIdentifier : cve@mitre.org (string)

vulnStatus : Deferred (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-200 (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

Metrics

Attack Vector Network

Attack Complexity High

Privileges Required High

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

Access Vector Network

Access Complexity Medium

Authentication Single

Confidentiality Impact Partial

Integrity Impact None

Availability Impact None

Affected Vendors & Products

Metrics

Attack Vector Network

Attack Complexity High

Privileges Required High

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

Access Vector Network

Access Complexity Medium

Authentication Single

Confidentiality Impact Partial

Integrity Impact None

Availability Impact None

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object