Potential Remote Attack on Print Handler Function in VIWIS LMS 9.11

CVE-2024-8001

What is CVE-2024-8001?

A security flaw exists in the Print Handler component of VIWIS LMS 9.11, which can be exploited by users with learner roles. This vulnerability allows these users to bypass the intended authorization mechanisms, enabling them to access sensitive exam content and solutions through the administrative print function. The attack can be performed remotely, particularly before and after designated exam slots, posing a significant risk to the integrity of the examination process. Immediate patching is recommended to mitigate this vulnerability and protect against unauthorized access.

References