← All advisories

High severity8.1NVD Advisory· Published Jan 3, 2018· Updated Jun 17, 2026

CVE-2017-1000489

CVE-2017-1000489

Description

Mautic versions 2.0.0 - 2.11.0 with a SSO plugin installed could allow a disabled user to still login using email address

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
mautic/corePackagist	>= 2.0.0, < 2.12.0	2.12.0

Affected products

27

ghsa-coords
pkg:composer/mautic/core
Range: >= 2.0.0, < 2.12.0
Mautic/Mautic26 versions
cpe:2.3:a:acquia:mautic:2.0.0:*:*:*:*:*:*:*+ 25 more
- cpe:2.3:a:acquia:mautic:2.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:acquia:mautic:2.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:acquia:mautic:2.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:acquia:mautic:2.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:acquia:mautic:2.2.0:*:*:*:*:*:*:*
- cpe:2.3:a:acquia:mautic:2.2.1:*:*:*:*:*:*:*
- cpe:2.3:a:acquia:mautic:2.3.0:*:*:*:*:*:*:*
- cpe:2.3:a:acquia:mautic:2.4.0:*:*:*:*:*:*:*
- cpe:2.3:a:acquia:mautic:2.5.0:*:*:*:*:*:*:*
- cpe:2.3:a:acquia:mautic:2.5.1:*:*:*:*:*:*:*
- cpe:2.3:a:acquia:mautic:2.6.0:*:*:*:*:*:*:*
- cpe:2.3:a:acquia:mautic:2.6.1:*:*:*:*:*:*:*
- cpe:2.3:a:acquia:mautic:2.7.0:*:*:*:*:*:*:*
- cpe:2.3:a:acquia:mautic:2.7.1:*:*:*:*:*:*:*
- cpe:2.3:a:acquia:mautic:2.8.0:*:*:*:*:*:*:*
- cpe:2.3:a:acquia:mautic:2.8.1:*:*:*:*:*:*:*
- cpe:2.3:a:acquia:mautic:2.8.2:*:*:*:*:*:*:*
- cpe:2.3:a:acquia:mautic:2.9.0:beta:*:*:*:*:*:*
- cpe:2.3:a:acquia:mautic:2.9.1:*:*:*:*:*:*:*
- cpe:2.3:a:acquia:mautic:2.10.0:beta:*:*:*:*:*:*
- cpe:2.3:a:acquia:mautic:2.10.1:*:*:*:*:*:*:*
- cpe:2.3:a:acquia:mautic:2.11.0:beta:*:*:*:*:*:*
- cpe:2.3:a:mautic:mautic:2.9.0:*:*:*:*:*:*:*
- cpe:2.3:a:mautic:mautic:2.9.2:*:*:*:*:*:*:*
- cpe:2.3:a:mautic:mautic:2.10.0:*:*:*:*:*:*:*
- cpe:2.3:a:mautic:mautic:2.11.0:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.

CVE-2017-1000489 · High · VYPR