A vulnerability was found in VIWIS LMS 9.11. It has been classified as critical. Affected is an unknown function of the component Print Handler. The manipulation leads to missing authorization. It is possible to launch the attack remotely. A user with the role learner can use the administrative print function with an active session before and after an exam slot to access the entire exam including solutions in the web application. It is recommended to apply a patch to fix this issue.
References
| Link | Resource |
|---|---|
| https://vuldb.com/?ctiid.284352 | Permissions Required |
| https://vuldb.com/?id.284352 | Third Party Advisory |
| https://www.scip.ch/?news.20241203 |
Configurations
History
08 Jan 2025, 07:15
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-863 |
|
| References |
|
19 Nov 2024, 15:41
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:viwis:learning_management_system:9.11:*:*:*:*:*:*:* | |
| First Time |
Viwis
Viwis learning Management System |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 4.3 |
| References | () https://vuldb.com/?id.284352 - Third Party Advisory | |
| References | () https://vuldb.com/?ctiid.284352 - Permissions Required |
13 Nov 2024, 10:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-11-13 10:15
Updated : 2025-01-08 07:15
NVD link : CVE-2024-8001
Mitre link : CVE-2024-8001
JSON object : View
Products Affected
viwis
- learning_management_system
CWE
No CWE.