10 February 2017, 19:23

Hello,

Pawel Kubzdyl uncovered an issue in Mahara Mobile that logged passwords in plain text to the Mahara access log. This has been fixed for Android: https://play.google.com/store/apps/details?id=org.mahara.mobile Please install version 1.2.1 of Mahara Mobile as soon as possible.

The fix for iOS devices is currently under review by Apple and will be provided as soon as possible.

Cheers

Kristina

12 February 2017, 16:55

Hello,

The iOS version of Mahara Mobile that fixes the security issue is now also available. You can access it at https://itunes.apple.com/us/app/mahara-mobile/id1172638950?mt=8

It's called version 1.1.2, but really is 1.2.1 as for Android. The upload process is a bit baffling and I couldn't delete that old pending version and only upload a new build. Next time they should be in sync again.

Cheers

Kristina