{
  "affected": [
    {
      "ranges": [
        {
          "database_specific": {
            "cpe": "cpe:2.3:a:mahara:mahara:*:*:*:*:*:*:*:*",
            "extracted_events": [
              {
                "introduced": "16.10.0"
              },
              {
                "fixed": "16.10.7"
              },
              {
                "introduced": "17.04.0"
              },
              {
                "fixed": "17.04.5"
              },
              {
                "introduced": "17.10.0"
              },
              {
                "fixed": "17.10.2"
              }
            ],
            "source": "CPE_RANGE"
          },
          "events": [
            {
              "introduced": "2d4a3b547ca5aa058a975f870f21ddf64fc840db"
            },
            {
              "fixed": "07d65ee9e2aec6a198371467ac7919e710ab0448"
            },
            {
              "introduced": "c1b8e4e448228b12a674c205a7288389613271e7"
            },
            {
              "fixed": "8d0b45c841df6d94d1c401e8efd3b6665a6fea59"
            },
            {
              "introduced": "7e3e132425fc023eb85e66717284540d80bdacd1"
            },
            {
              "fixed": "1c9cce2d0b3881e5323244e91be781ad7c85668c"
            }
          ],
          "repo": "https://github.com/maharaproject/mahara",
          "type": "GIT"
        }
      ]
    }
  ],
  "database_specific": {},
  "details": "Mahara 16.10 before 16.10.7, 17.04 before 17.04.5, and 17.10 before 17.10.2 are vulnerable to being forced, via a man-in-the-middle attack, to interact with Mahara on the HTTP protocol rather than HTTPS even when an SSL certificate is present.",
  "id": "CVE-2017-17455",
  "modified": "2026-07-08T05:38:32.148744862Z",
  "published": "2018-02-20T22:29:00.283Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://bugs.launchpad.net/mahara/+bug/1734767"
    },
    {
      "type": "ADVISORY",
      "url": "https://mahara.org/interaction/forum/topic.php?id=8150"
    },
    {
      "type": "ADVISORY",
      "url": "https://reviews.mahara.org/#/c/8312/"
    }
  ],
  "severity": [
    {
      "score": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
      "type": "CVSS_V3"
    }
  ]
}