{"id":"CVE-2017-1000152","details":"Mahara 15.04 before 15.04.7 and 15.10 before 15.10.3 running PHP 5.3 are vulnerable to one user being logged in as another user on a separate computer as the same session ID is served. This situation can occur when a user takes an action that forces another user to be logged out of Mahara, such as an admin changing another user's account settings.","modified":"2026-07-08T12:54:24.989533Z","published":"2017-11-03T18:29:00.980Z","references":[{"type":"FIX","url":"https://bugs.launchpad.net/mahara/+bug/1570744"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/maharaproject/mahara","events":[{"introduced":"48a238a2f76a7ea322580fe93b7c026becd9acce"},{"last_affected":"3c718e63ed2b6d3d351d38d94c7008ee880ad655"}],"database_specific":{"extracted_events":[{"introduced":"15.04-rc1"},{"last_affected":"15.04-rc1"},{"introduced":"15.04-rc2"},{"last_affected":"15.04-rc2"},{"introduced":"15.04.0"},{"last_affected":"15.04.0"},{"introduced":"15.04.1"},{"last_affected":"15.04.1"},{"introduced":"15.04.2"},{"last_affected":"15.04.2"},{"introduced":"15.04.3"},{"last_affected":"15.04.3"},{"introduced":"15.04.4"},{"last_affected":"15.04.4"},{"introduced":"15.04.5"},{"last_affected":"15.04.5"},{"introduced":"15.04.6"},{"last_affected":"15.04.6"},{"introduced":"15.10.0"},{"last_affected":"15.10.0"},{"introduced":"15.10.1"},{"last_affected":"15.10.1"},{"introduced":"15.10.2"},{"last_affected":"15.10.2"}],"source":"CPE_STRING","cpe":["cpe:2.3:a:mahara:mahara:15.04:rc1:*:*:*:*:*:*","cpe:2.3:a:mahara:mahara:15.04:rc2:*:*:*:*:*:*","cpe:2.3:a:mahara:mahara:15.04.0:*:*:*:*:*:*:*","cpe:2.3:a:mahara:mahara:15.04.1:*:*:*:*:*:*:*","cpe:2.3:a:mahara:mahara:15.04.2:*:*:*:*:*:*:*","cpe:2.3:a:mahara:mahara:15.04.3:*:*:*:*:*:*:*","cpe:2.3:a:mahara:mahara:15.04.4:*:*:*:*:*:*:*","cpe:2.3:a:mahara:mahara:15.04.5:*:*:*:*:*:*:*","cpe:2.3:a:mahara:mahara:15.04.6:*:*:*:*:*:*:*","cpe:2.3:a:mahara:mahara:15.10.0:*:*:*:*:*:*:*","cpe:2.3:a:mahara:mahara:15.10.1:*:*:*:*:*:*:*","cpe:2.3:a:mahara:mahara:15.10.2:*:*:*:*:*:*:*"]}}],"versions":["15.04-rc1","15.04-rc2","15.04.0","15.04.1","15.04.2","15.04.3","15.04.4","15.04.5","15.04.6","15.10.0","15.10.1","15.10.2"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-1000152.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}]}