CVE-2012-2351
Severity Score
5.0
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
The default configuration of the auth/saml plugin in Mahara before 1.4.2 sets the "Match username attribute to Remote username" option to false, which allows remote SAML IdP servers to spoof users of other SAML IdP servers by using the same internal username.
La configuración por defecto del plugin auth/SAML en Mahara antes de v1.4.2 establece el atributo "Match Username to Remote Username" a falso, lo que permite falsificar usuarios de otros servidores a los servidores remotos SAML IdP utilizando el mismo nombre de usuario interno.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2012-04-19 CVE Reserved
- 2012-07-12 CVE Published
- 2024-09-16 CVE Updated
- 2024-09-17 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-16: Configuration
- CWE-284: Improper Access Control
- CWE-287: Improper Authentication
CAPEC
References (5)
| URL | Tag | Source |
|---|---|---|
| http://www.openwall.com/lists/oss-security/2012/05/11/9 | Mailing List |
|
| http://www.openwall.com/lists/oss-security/2012/05/12/4 | Mailing List |
|
| https://bugs.launchpad.net/mahara/+bug/932909 | Issue Tracking |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://gitorious.org/mahara/mahara/commit/f07be6020e70fa8f53cd77fdcd63e7fd7ff8aaea | 2016-12-07 |
| URL | Date | SRC |
|---|---|---|
| http://www.debian.org/security/2012/dsa-2467 | 2016-12-07 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Debian Search vendor "Debian" | Debian Linux Search vendor "Debian" for product "Debian Linux" | 6.0 Search vendor "Debian" for product "Debian Linux" and version "6.0" | - |
Affected
| ||||||
| Mahara Search vendor "Mahara" | Mahara Search vendor "Mahara" for product "Mahara" | <= 1.4.1 Search vendor "Mahara" for product "Mahara" and version " <= 1.4.1" | - |
Affected
| ||||||
| Mahara Search vendor "Mahara" | Mahara Search vendor "Mahara" for product "Mahara" | 0.9.0 Search vendor "Mahara" for product "Mahara" and version "0.9.0" | - |
Affected
| ||||||
| Mahara Search vendor "Mahara" | Mahara Search vendor "Mahara" for product "Mahara" | 0.9.1 Search vendor "Mahara" for product "Mahara" and version "0.9.1" | - |
Affected
| ||||||
| Mahara Search vendor "Mahara" | Mahara Search vendor "Mahara" for product "Mahara" | 0.9.2 Search vendor "Mahara" for product "Mahara" and version "0.9.2" | - |
Affected
| ||||||
| Mahara Search vendor "Mahara" | Mahara Search vendor "Mahara" for product "Mahara" | 1.0.0 Search vendor "Mahara" for product "Mahara" and version "1.0.0" | - |
Affected
| ||||||
| Mahara Search vendor "Mahara" | Mahara Search vendor "Mahara" for product "Mahara" | 1.0.1 Search vendor "Mahara" for product "Mahara" and version "1.0.1" | - |
Affected
| ||||||
| Mahara Search vendor "Mahara" | Mahara Search vendor "Mahara" for product "Mahara" | 1.0.2 Search vendor "Mahara" for product "Mahara" and version "1.0.2" | - |
Affected
| ||||||
| Mahara Search vendor "Mahara" | Mahara Search vendor "Mahara" for product "Mahara" | 1.0.3 Search vendor "Mahara" for product "Mahara" and version "1.0.3" | - |
Affected
| ||||||
| Mahara Search vendor "Mahara" | Mahara Search vendor "Mahara" for product "Mahara" | 1.0.4 Search vendor "Mahara" for product "Mahara" and version "1.0.4" | - |
Affected
| ||||||
| Mahara Search vendor "Mahara" | Mahara Search vendor "Mahara" for product "Mahara" | 1.0.5 Search vendor "Mahara" for product "Mahara" and version "1.0.5" | - |
Affected
| ||||||
| Mahara Search vendor "Mahara" | Mahara Search vendor "Mahara" for product "Mahara" | 1.0.6 Search vendor "Mahara" for product "Mahara" and version "1.0.6" | - |
Affected
| ||||||
| Mahara Search vendor "Mahara" | Mahara Search vendor "Mahara" for product "Mahara" | 1.0.7 Search vendor "Mahara" for product "Mahara" and version "1.0.7" | - |
Affected
| ||||||
| Mahara Search vendor "Mahara" | Mahara Search vendor "Mahara" for product "Mahara" | 1.0.8 Search vendor "Mahara" for product "Mahara" and version "1.0.8" | - |
Affected
| ||||||
| Mahara Search vendor "Mahara" | Mahara Search vendor "Mahara" for product "Mahara" | 1.0.9 Search vendor "Mahara" for product "Mahara" and version "1.0.9" | - |
Affected
| ||||||
| Mahara Search vendor "Mahara" | Mahara Search vendor "Mahara" for product "Mahara" | 1.0.10 Search vendor "Mahara" for product "Mahara" and version "1.0.10" | - |
Affected
| ||||||
| Mahara Search vendor "Mahara" | Mahara Search vendor "Mahara" for product "Mahara" | 1.0.11 Search vendor "Mahara" for product "Mahara" and version "1.0.11" | - |
Affected
| ||||||
| Mahara Search vendor "Mahara" | Mahara Search vendor "Mahara" for product "Mahara" | 1.0.12 Search vendor "Mahara" for product "Mahara" and version "1.0.12" | - |
Affected
| ||||||
| Mahara Search vendor "Mahara" | Mahara Search vendor "Mahara" for product "Mahara" | 1.0.13 Search vendor "Mahara" for product "Mahara" and version "1.0.13" | - |
Affected
| ||||||
| Mahara Search vendor "Mahara" | Mahara Search vendor "Mahara" for product "Mahara" | 1.0.14 Search vendor "Mahara" for product "Mahara" and version "1.0.14" | - |
Affected
| ||||||
| Mahara Search vendor "Mahara" | Mahara Search vendor "Mahara" for product "Mahara" | 1.0.15 Search vendor "Mahara" for product "Mahara" and version "1.0.15" | - |
Affected
| ||||||
| Mahara Search vendor "Mahara" | Mahara Search vendor "Mahara" for product "Mahara" | 1.1 Search vendor "Mahara" for product "Mahara" and version "1.1" | - |
Affected
| ||||||
| Mahara Search vendor "Mahara" | Mahara Search vendor "Mahara" for product "Mahara" | 1.1.0 Search vendor "Mahara" for product "Mahara" and version "1.1.0" | - |
Affected
| ||||||
| Mahara Search vendor "Mahara" | Mahara Search vendor "Mahara" for product "Mahara" | 1.1.0 Search vendor "Mahara" for product "Mahara" and version "1.1.0" | alpha1 |
Affected
| ||||||
| Mahara Search vendor "Mahara" | Mahara Search vendor "Mahara" for product "Mahara" | 1.1.0 Search vendor "Mahara" for product "Mahara" and version "1.1.0" | alpha2 |
Affected
| ||||||
| Mahara Search vendor "Mahara" | Mahara Search vendor "Mahara" for product "Mahara" | 1.1.0 Search vendor "Mahara" for product "Mahara" and version "1.1.0" | alpha3 |
Affected
| ||||||
| Mahara Search vendor "Mahara" | Mahara Search vendor "Mahara" for product "Mahara" | 1.1.0 Search vendor "Mahara" for product "Mahara" and version "1.1.0" | beta1 |
Affected
| ||||||
| Mahara Search vendor "Mahara" | Mahara Search vendor "Mahara" for product "Mahara" | 1.1.0 Search vendor "Mahara" for product "Mahara" and version "1.1.0" | beta2 |
Affected
| ||||||
| Mahara Search vendor "Mahara" | Mahara Search vendor "Mahara" for product "Mahara" | 1.1.0 Search vendor "Mahara" for product "Mahara" and version "1.1.0" | beta3 |
Affected
| ||||||
| Mahara Search vendor "Mahara" | Mahara Search vendor "Mahara" for product "Mahara" | 1.1.0 Search vendor "Mahara" for product "Mahara" and version "1.1.0" | beta4 |
Affected
| ||||||
| Mahara Search vendor "Mahara" | Mahara Search vendor "Mahara" for product "Mahara" | 1.1.0 Search vendor "Mahara" for product "Mahara" and version "1.1.0" | rc1 |
Affected
| ||||||
| Mahara Search vendor "Mahara" | Mahara Search vendor "Mahara" for product "Mahara" | 1.1.0 Search vendor "Mahara" for product "Mahara" and version "1.1.0" | rc2 |
Affected
| ||||||
| Mahara Search vendor "Mahara" | Mahara Search vendor "Mahara" for product "Mahara" | 1.1.1 Search vendor "Mahara" for product "Mahara" and version "1.1.1" | - |
Affected
| ||||||
| Mahara Search vendor "Mahara" | Mahara Search vendor "Mahara" for product "Mahara" | 1.1.2 Search vendor "Mahara" for product "Mahara" and version "1.1.2" | - |
Affected
| ||||||
| Mahara Search vendor "Mahara" | Mahara Search vendor "Mahara" for product "Mahara" | 1.1.3 Search vendor "Mahara" for product "Mahara" and version "1.1.3" | - |
Affected
| ||||||
| Mahara Search vendor "Mahara" | Mahara Search vendor "Mahara" for product "Mahara" | 1.1.4 Search vendor "Mahara" for product "Mahara" and version "1.1.4" | - |
Affected
| ||||||
| Mahara Search vendor "Mahara" | Mahara Search vendor "Mahara" for product "Mahara" | 1.1.5 Search vendor "Mahara" for product "Mahara" and version "1.1.5" | - |
Affected
| ||||||
| Mahara Search vendor "Mahara" | Mahara Search vendor "Mahara" for product "Mahara" | 1.1.6 Search vendor "Mahara" for product "Mahara" and version "1.1.6" | - |
Affected
| ||||||
| Mahara Search vendor "Mahara" | Mahara Search vendor "Mahara" for product "Mahara" | 1.1.7 Search vendor "Mahara" for product "Mahara" and version "1.1.7" | - |
Affected
| ||||||
| Mahara Search vendor "Mahara" | Mahara Search vendor "Mahara" for product "Mahara" | 1.1.8 Search vendor "Mahara" for product "Mahara" and version "1.1.8" | - |
Affected
| ||||||
| Mahara Search vendor "Mahara" | Mahara Search vendor "Mahara" for product "Mahara" | 1.1.9 Search vendor "Mahara" for product "Mahara" and version "1.1.9" | - |
Affected
| ||||||
| Mahara Search vendor "Mahara" | Mahara Search vendor "Mahara" for product "Mahara" | 1.2.0 Search vendor "Mahara" for product "Mahara" and version "1.2.0" | - |
Affected
| ||||||
| Mahara Search vendor "Mahara" | Mahara Search vendor "Mahara" for product "Mahara" | 1.2.0 Search vendor "Mahara" for product "Mahara" and version "1.2.0" | alpha1 |
Affected
| ||||||
| Mahara Search vendor "Mahara" | Mahara Search vendor "Mahara" for product "Mahara" | 1.2.0 Search vendor "Mahara" for product "Mahara" and version "1.2.0" | alpha2 |
Affected
| ||||||
| Mahara Search vendor "Mahara" | Mahara Search vendor "Mahara" for product "Mahara" | 1.2.0 Search vendor "Mahara" for product "Mahara" and version "1.2.0" | alpha3 |
Affected
| ||||||
| Mahara Search vendor "Mahara" | Mahara Search vendor "Mahara" for product "Mahara" | 1.2.0 Search vendor "Mahara" for product "Mahara" and version "1.2.0" | beta1 |
Affected
| ||||||
| Mahara Search vendor "Mahara" | Mahara Search vendor "Mahara" for product "Mahara" | 1.2.0 Search vendor "Mahara" for product "Mahara" and version "1.2.0" | beta2 |
Affected
| ||||||
| Mahara Search vendor "Mahara" | Mahara Search vendor "Mahara" for product "Mahara" | 1.2.0 Search vendor "Mahara" for product "Mahara" and version "1.2.0" | beta3 |
Affected
| ||||||
| Mahara Search vendor "Mahara" | Mahara Search vendor "Mahara" for product "Mahara" | 1.2.0 Search vendor "Mahara" for product "Mahara" and version "1.2.0" | beta4 |
Affected
| ||||||
| Mahara Search vendor "Mahara" | Mahara Search vendor "Mahara" for product "Mahara" | 1.2.0 Search vendor "Mahara" for product "Mahara" and version "1.2.0" | rc1 |
Affected
| ||||||
| Mahara Search vendor "Mahara" | Mahara Search vendor "Mahara" for product "Mahara" | 1.2.1 Search vendor "Mahara" for product "Mahara" and version "1.2.1" | - |
Affected
| ||||||
| Mahara Search vendor "Mahara" | Mahara Search vendor "Mahara" for product "Mahara" | 1.2.2 Search vendor "Mahara" for product "Mahara" and version "1.2.2" | - |
Affected
| ||||||
| Mahara Search vendor "Mahara" | Mahara Search vendor "Mahara" for product "Mahara" | 1.2.3 Search vendor "Mahara" for product "Mahara" and version "1.2.3" | - |
Affected
| ||||||
| Mahara Search vendor "Mahara" | Mahara Search vendor "Mahara" for product "Mahara" | 1.2.4 Search vendor "Mahara" for product "Mahara" and version "1.2.4" | - |
Affected
| ||||||
| Mahara Search vendor "Mahara" | Mahara Search vendor "Mahara" for product "Mahara" | 1.2.5 Search vendor "Mahara" for product "Mahara" and version "1.2.5" | - |
Affected
| ||||||
| Mahara Search vendor "Mahara" | Mahara Search vendor "Mahara" for product "Mahara" | 1.2.6 Search vendor "Mahara" for product "Mahara" and version "1.2.6" | - |
Affected
| ||||||
| Mahara Search vendor "Mahara" | Mahara Search vendor "Mahara" for product "Mahara" | 1.3.0 Search vendor "Mahara" for product "Mahara" and version "1.3.0" | - |
Affected
| ||||||
| Mahara Search vendor "Mahara" | Mahara Search vendor "Mahara" for product "Mahara" | 1.3.0 Search vendor "Mahara" for product "Mahara" and version "1.3.0" | beta1 |
Affected
| ||||||
| Mahara Search vendor "Mahara" | Mahara Search vendor "Mahara" for product "Mahara" | 1.3.0 Search vendor "Mahara" for product "Mahara" and version "1.3.0" | beta2 |
Affected
| ||||||
| Mahara Search vendor "Mahara" | Mahara Search vendor "Mahara" for product "Mahara" | 1.3.0 Search vendor "Mahara" for product "Mahara" and version "1.3.0" | beta3 |
Affected
| ||||||
| Mahara Search vendor "Mahara" | Mahara Search vendor "Mahara" for product "Mahara" | 1.3.0 Search vendor "Mahara" for product "Mahara" and version "1.3.0" | beta4 |
Affected
| ||||||
| Mahara Search vendor "Mahara" | Mahara Search vendor "Mahara" for product "Mahara" | 1.3.0 Search vendor "Mahara" for product "Mahara" and version "1.3.0" | rc1 |
Affected
| ||||||
| Mahara Search vendor "Mahara" | Mahara Search vendor "Mahara" for product "Mahara" | 1.3.1 Search vendor "Mahara" for product "Mahara" and version "1.3.1" | - |
Affected
| ||||||
| Mahara Search vendor "Mahara" | Mahara Search vendor "Mahara" for product "Mahara" | 1.3.2 Search vendor "Mahara" for product "Mahara" and version "1.3.2" | - |
Affected
| ||||||
| Mahara Search vendor "Mahara" | Mahara Search vendor "Mahara" for product "Mahara" | 1.3.3 Search vendor "Mahara" for product "Mahara" and version "1.3.3" | - |
Affected
| ||||||
| Mahara Search vendor "Mahara" | Mahara Search vendor "Mahara" for product "Mahara" | 1.3.4 Search vendor "Mahara" for product "Mahara" and version "1.3.4" | - |
Affected
| ||||||
| Mahara Search vendor "Mahara" | Mahara Search vendor "Mahara" for product "Mahara" | 1.3.5 Search vendor "Mahara" for product "Mahara" and version "1.3.5" | - |
Affected
| ||||||
| Mahara Search vendor "Mahara" | Mahara Search vendor "Mahara" for product "Mahara" | 1.3.6 Search vendor "Mahara" for product "Mahara" and version "1.3.6" | - |
Affected
| ||||||
| Mahara Search vendor "Mahara" | Mahara Search vendor "Mahara" for product "Mahara" | 1.3.7 Search vendor "Mahara" for product "Mahara" and version "1.3.7" | - |
Affected
| ||||||
| Mahara Search vendor "Mahara" | Mahara Search vendor "Mahara" for product "Mahara" | 1.3.8 Search vendor "Mahara" for product "Mahara" and version "1.3.8" | - |
Affected
| ||||||
| Mahara Search vendor "Mahara" | Mahara Search vendor "Mahara" for product "Mahara" | 1.4 Search vendor "Mahara" for product "Mahara" and version "1.4" | rc1 |
Affected
| ||||||
| Mahara Search vendor "Mahara" | Mahara Search vendor "Mahara" for product "Mahara" | 1.4 Search vendor "Mahara" for product "Mahara" and version "1.4" | rc2 |
Affected
| ||||||
| Mahara Search vendor "Mahara" | Mahara Search vendor "Mahara" for product "Mahara" | 1.4 Search vendor "Mahara" for product "Mahara" and version "1.4" | rc3 |
Affected
| ||||||
| Mahara Search vendor "Mahara" | Mahara Search vendor "Mahara" for product "Mahara" | 1.4 Search vendor "Mahara" for product "Mahara" and version "1.4" | rc4 |
Affected
| ||||||
| Mahara Search vendor "Mahara" | Mahara Search vendor "Mahara" for product "Mahara" | 1.4.0 Search vendor "Mahara" for product "Mahara" and version "1.4.0" | - |
Affected
| ||||||