CVE-2024-47876 Sakai: Kernel users created with type roleview can login as a normal user
Attackers can log in as normal users using kernel accounts with roleview type, gaining unauthorized access to the Sakai learning environment.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2024-47876?
CVE-2024-47876 is a high-severity authentication bypass vulnerability in sakaiproject sakai, published on 15 Oct 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Sakai is a Collaboration and Learning Environment. Starting in version 23.0 and prior to version 23.2, kernel users created with type roleview can log in as a normal user. This can result in illegal access being granted to the system. Version 23.3 fixes this vulnerability.
Which versions are affected by CVE-2024-47876?
2 open source packages ship an affected version, including org.sakaiproject.kernel:sakai-kernel-impl. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
org.sakaiproject.kernel:sakai-kernel-impl Maven | From 23.0 | 23.3 |
org.sakaiproject.kernel:sakai-kernel-impl Maven | From 23.0 | 23.3 |
Products include Sakailms Sakai.
How do I fix CVE-2024-47876?
Upgrade org.sakaiproject.kernel:sakai-kernel-impl to 23.3 or later.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2024-47876 being exploited?
There is no known exploitation of CVE-2024-47876 in the wild and no public exploit code.
Other vulnerabilities in sakaiproject sakai
Sources
Also known as GHSA-cx95-q6gx-w4qp.