CVE-2018-11565

{"id": "CVE-2018-11565", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 3.9}]}, "published": "2018-05-30T21:29:00.690", "references": [{"url": "https://bugs.launchpad.net/mahara/+bug/1772774", "tags": ["Issue Tracking", "Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "https://mahara.org/interaction/forum/topic.php?id=8271", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "https://bugs.launchpad.net/mahara/+bug/1772774", "tags": ["Issue Tracking", "Patch", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://mahara.org/interaction/forum/topic.php?id=8271", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-200"}]}], "descriptions": [{"lang": "en", "value": "Mahara 17.04 before 17.04.8 and 17.10 before 17.10.5 and 18.04 before 18.04.1 are vulnerable to mentioning the usernames that are already taken by people registered in the system rather than masking that information."}, {"lang": "es", "value": "Mahara en versiones 17.04 anteriores a la 17.04.8, versiones 17.10 anteriores a la 17.10.5 y versiones 18.04 anteriores a la 18.04.1 es vulnerable a mencionar los nombres de usuario que ya est\u00e1n en uso por personas registradas en el sistema, en lugar de ocultar dicha informaci\u00f3n."}], "lastModified": "2024-11-21T03:43:37.810", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:mahara:mahara:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "45AB0DD3-CCBA-4C94-837E-6E2B4635E8A9", "versionEndExcluding": "17.04.8", "versionStartIncluding": "17.04.0"}, {"criteria": "cpe:2.3:a:mahara:mahara:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "87104E12-A6F3-4762-A518-F81C906DA755", "versionEndExcluding": "17.10.5", "versionStartIncluding": "17.10.0"}, {"criteria": "cpe:2.3:a:mahara:mahara:18.04.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "50BB0028-28D9-4F5C-B46A-B5BEFA50149E"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}