Description
ATutor versions 2.2.1 and earlier are vulnerable to an incorrect access control check vulnerability in the Social Application component resulting in privilege escalation. ATutor versions 2.2.1 and earlier are vulnerable to an incorrect access control check vulnerability in the Module component resulting in privilege escalation. ATutor versions 2.2.1 and earlier are vulnerable to a incorrect access control check vulnerability in the Alternative Content component resulting in privilege escalation.
References (3)
Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/99599
Broken Link x_refsource_confirm
http://www.atutor.ca/atutor/mantis/view.php?id=5681
Broken Link x_refsource_confirm
http://www.atutor.ca/atutor/mantis/changelog_page.php?version_id=55
Scores
CVSS v3
9.8
EPSS
0.0232
EPSS Percentile
81.3%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-269
Status
published
Products (1)
atutor/atutor
< 2.2.1
Published
Jul 17, 2017
Tracked Since
Feb 18, 2026