Security Advisory

CVE-2017-17455

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2018-02-20 22:00:00

Last updated 2024-08-05 20:51:31

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

Mahara 16.10 before 16.10.7, 17.04 before 17.04.5, and 17.10 before 17.10.2 are vulnerable to being forced, via a man-in-the-middle attack, to interact with Mahara on the HTTP protocol rather than HTTPS even when an SSL certificate is present.

← Browse all CVEs View on cve.org ↗