Skip to content
OpenAdvisories
Unscored DSA-2467-1 1 CVE

mahara - insecure defaults

Published May 9, 2012 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 6.0 mahara 1.2.6-2+squeeze4

Vulnerabilities 1

  • Unscored —

    The default configuration of the auth/saml plugin in Mahara before 1.4.2 sets the "Match username attribute to Remote u…