CVE-2024-47876

Sakai is a Collaboration and Learning Environment. Starting in version 23.0 and prior to version 23.2, kernel users created with type roleview can log in as a normal user. This can result in illegal access being granted to the system. Version 23.3 fixes this vulnerability.

CVSS v3 8.8 HIGH

8.8^/10

CVSS v3 : HIGH

Vector :

Exploitability : 2.8 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://github.com/sakaiproject/sakai/commit/a9aadd9347cfb204515e89ac0163e1be9e56cc41	Patch
https://github.com/sakaiproject/sakai/security/advisories/GHSA-cx95-q6gx-w4qp	Vendor Advisory
https://sakaiproject.atlassian.net/browse/SAK-50571	Permissions Required

Configurations

Configuration 1 (hide)

cpe:2.3:a:sakailms:sakai:*:*:*:*:*:*:*:*

History

30 Oct 2025, 18:14

Type	Values Removed	Values Added
First Time		Sakailms Sakailms sakai
CPE		cpe:2.3:a:sakailms:sakai::::::::
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : unknown v3 : 8.8
References	~~() https://github.com/sakaiproject/sakai/commit/a9aadd9347cfb204515e89ac0163e1be9e56cc41 -~~	() https://github.com/sakaiproject/sakai/commit/a9aadd9347cfb204515e89ac0163e1be9e56cc41 - Patch
References	~~() https://github.com/sakaiproject/sakai/security/advisories/GHSA-cx95-q6gx-w4qp -~~	() https://github.com/sakaiproject/sakai/security/advisories/GHSA-cx95-q6gx-w4qp - Vendor Advisory
References	~~() https://sakaiproject.atlassian.net/browse/SAK-50571 -~~	() https://sakaiproject.atlassian.net/browse/SAK-50571 - Permissions Required

Information

Published : 2024-10-15 16:15

Updated : 2025-10-30 18:14

NVD link : CVE-2024-47876

Mitre link : CVE-2024-47876

CVE.ORG link : CVE-2024-47876

JSON object : View

Products Affected

sakailms

sakai

CWE

CWE-285

Improper Authorization

CWE-863

Incorrect Authorization

{"id": "CVE-2024-47876", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.8}], "cvssMetricV40": [{"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 8.7, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "HIGH", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "NONE", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "published": "2024-10-15T16:15:05.420", "references": [{"url": "https://github.com/sakaiproject/sakai/commit/a9aadd9347cfb204515e89ac0163e1be9e56cc41", "tags": ["Patch"], "source": "security-advisories@github.com"}, {"url": "https://github.com/sakaiproject/sakai/security/advisories/GHSA-cx95-q6gx-w4qp", "tags": ["Vendor Advisory"], "source": "security-advisories@github.com"}, {"url": "https://sakaiproject.atlassian.net/browse/SAK-50571", "tags": ["Permissions Required"], "source": "security-advisories@github.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-285"}, {"lang": "en", "value": "CWE-863"}]}], "descriptions": [{"lang": "en", "value": "Sakai is a Collaboration and Learning Environment. Starting in version 23.0 and prior to version 23.2, kernel users created with type roleview can log in as a normal user. This can result in illegal access being granted to the system. Version 23.3 fixes this vulnerability."}, {"lang": "es", "value": "Sakai es un entorno de colaboraci\u00f3n y aprendizaje. A partir de la versi\u00f3n 23.0 y antes de la versi\u00f3n 23.2, los usuarios del kernel creados con el tipo roleview pueden iniciar sesi\u00f3n como usuarios normales. Esto puede provocar que se conceda acceso ilegal al sistema. La versi\u00f3n 23.3 corrige esta vulnerabilidad."}], "lastModified": "2025-10-30T18:14:44.267", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:sakailms:sakai:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0B20D85D-B32F-4D55-B5E5-A2050F9C60F0", "versionEndExcluding": "23.2", "versionStartIncluding": "23.0"}], "operator": "OR"}]}], "sourceIdentifier": "security-advisories@github.com"}