PT-2017-6791 · Ellucian · Ellucian Banner Student

Published 2017-09-11 · Updated 2019-03-13 · CVE-2015-4689

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Ellucian Banner Student versions 8.5.1.2 through 8.7

Description The issue allows remote attackers to reset arbitrary passwords, which could lead to unauthorized access. The estimated number of potentially affected devices and details about real-world incidents are not specified.

Recommendations For versions 8.5.1.2 through 8.7, update to a version that addresses the weak password reset issue to prevent unauthorized password resets.

Fix

Weakness Enumeration

CWE-640

Related Identifiers

CVE-2015-4689

Affected Products

Ellucian Banner Student

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2015-4689 · Security Note
• http://securityfocus.com/archive/1/537029/100/0/threaded · Note
• http://packetstormsecurity.com/files/134622/Banner-Student-XSS-Information-Disclosure-Open-Redirect.html · Note