PT-2000-1539 · Blackboard · Blackboard Courseinfo

Publicado 2000-07-10 · Atualizado 2008-09-10 · CVE-2000-0605

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Blackboard CourseInfo version 4.0

Description The issue concerns the storage of sensitive information. Blackboard CourseInfo 4.0 stores local and SQL administrator user names and passwords in cleartext in a registry key. The access control for this registry key allows users to access the passwords.

Recommendations For Blackboard CourseInfo version 4.0, consider restricting access to the registry key that stores the local and SQL administrator user names and passwords to minimize the risk of exploitation. As a temporary workaround, limit user privileges to prevent unauthorized access to sensitive information.

Correção

Identificadores relacionados

CVE-2000-0605

Produtos afetados

Blackboard Courseinfo

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2000-0605 · Nota de Segurança
• http://securityfocus.com/bid/1460 · Nota
• http://ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0007&L=NTBUGTRAQ&P=R1647 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2000-0605 · Nota