CVE Catalog
CVE-2017-1000171
CriticalSummary
Mahara Mobile before 1.2.1 is vulnerable to passwords being sent to the Mahara access log in plain text.
Risk Assessment
Storing passwords in plain text in logs can lead to their exposure, posing a risk of unauthorized access to user accounts.
Recommendation
It is recommended to upgrade Mahara Mobile to version 1.2.1 or later to secure password transmission.
Original NVD description (English source)
Mahara Mobile before 1.2.1 is vulnerable to passwords being sent to the Mahara access log in plain text.