Sakai Addresses Illegal Access Vulnerability in Prior Versions
CVE-2024-47876

Currently unrated

Key Information:

Vendor

Sakaiproject

Status
Sakai
Vendor
CVE Published:
15 October 2024

What is CVE-2024-47876?

Sakai is a Collaboration and Learning Environment. Starting in version 23.0 and prior to version 23.2, kernel users created with type roleview can log in as a normal user. This can result in illegal access being granted to the system. Version 23.3 fixes this vulnerability.

Affected Version(s)

sakai >= 23.0, < 23.3

References

https://github.com/sakaiproject/sakai/security/advisories...
x_refsource_CONFIRM
https://github.com/sakaiproject/sakai/commit/a9aadd9347cf...
x_refsource_MISC
https://sakaiproject.atlassian.net/browse/SAK-50571
x_refsource_MISC

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.