CVE-2015-6671: Edx Edx-Platform

Medium severity, CVSS 5.9. EPSS: 0.9% chance of exploitation in the next 30 days.

Open edX edx-platform before 2015-08-25 requires use of the database for storage of SAML SSO secrets, which makes it easier for context-dependent attackers to obtain sensitive information by leveraging access to a database backup.

Affected products

• Edx Edx-Platform: up to and including 2015-08-20

Published 2017-03-13. Last modified 2026-06-17.