CVE-2017-1000003

CRITICAL

ATutor <2.2.1 - Privilege Escalation

Title source: llm
STIX 2.1

Description

ATutor versions 2.2.1 and earlier are vulnerable to an incorrect access control check vulnerability in the Social Application component resulting in privilege escalation. ATutor versions 2.2.1 and earlier are vulnerable to an incorrect access control check vulnerability in the Module component resulting in privilege escalation. ATutor versions 2.2.1 and earlier are vulnerable to a incorrect access control check vulnerability in the Alternative Content component resulting in privilege escalation.

References (3)

Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/99599
Broken Link x_refsource_confirm
http://www.atutor.ca/atutor/mantis/view.php?id=5681

Scores

CVSS v3 9.8
EPSS 0.0232
EPSS Percentile 81.3%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-269
Status published
Products (1)
atutor/atutor < 2.2.1
Published Jul 17, 2017
Tracked Since Feb 18, 2026