CVE-2015-6671

Name of the Vulnerable Software and Affected Versions edx-platform versions prior to 2015-08-25

Description The issue allows context-dependent attackers to obtain sensitive information by leveraging access to a database backup, as the database is used for storage of SAML SSO secrets.

Recommendations For versions prior to 2015-08-25, update to a version that does not require the use of the database for storage of SAML SSO secrets to mitigate the risk of sensitive information disclosure.