Security-Blog
ILIAS 11.4
Following 7 security issues have been resolved:
0046342: Membership: Potential unauthenticated access by anonymous
0047936: Learning Progress: Unauthenticated access to general course information
0048220: Learning Sequence: Missing RBAC check in learning sequence
0048241: User Service: Remove SYSTEM_ROLE from List of Assignable Roles in Local User Administration
0048260: Group: Missing permission checks in groups
0048264: SCORM 1.2: Missing authorisation in ilObjSAHSLearningModuleGUI for uploads in SCORM
0048265: File: Unauthorized Upload of Files
Affected Version(s) | 9.22, 10.10, 11.3 |
Fixed Version(s) | 9.23, 10.11, 11.4, 12.0 Alpha |
CVSS Score 4.0 | 2.1 |
Reported By | Jens Weber (Universität Bern) |
Affected Version(s) | 9.22, 10.10, 11.3 |
Fixed Version(s) | 9.23, 10.11, 11.4, 12.0 Alpha |
CVSS Score 4.0 | 6.9 |
Reported By |
Affected Version(s) | 10.10, 11.3 |
Fixed Version(s) | 10.11, 11.4, 12.0 Alpha |
CVSS Score 4.0 | 6.9 |
Reported By | Daniel Kipp (Kröpelin Projekt GmbH) |
Affected Version(s) | 11.3 |
Fixed Version(s) | 11.4, 12.0 Alpha |
CVSS Score 4.0 | 8.6 |
Reported By | Kevin Pulfermuller (vimotion GmbH) |
Affected Version(s) | 9.22, 10.10, 11.3 |
Fixed Version(s) | 9.23, 10.11, 11.4, 12.0 Alpha |
CVSS Score 4.0 | 5.3 |
Reported By |
Affected Version(s) | 9.22, 10.10, 11.3 |
Fixed Version(s) | 9.23, 10.11, 11.4, 12.0 Alpha |
CVSS Score 4.0 | 9.2 |
Reported By | Manuel Kurz (Bundesverwaltungsamt – Team eCampus) |
Affected Version(s) | 9.22, 10.10, 11.3 |
Fixed Version(s) | 9.23, 10.11, 11.4, 12.0 Alpha |
CVSS Score 4.0 | 9.1 |
Reported By | Manuel Kurz (Bundesverwaltungsamt – Team eCampus) |