Vulnerability Description
Ellucian (formerly SunGard) Banner Student 8.5.1.2 through 8.7 allows remote attackers to reset arbitrary passwords via unspecified vectors, aka "Weak Password Reset."
CVSS Score
9.8
CRITICAL
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ellucian | Banner Student | 8.5.1.2 |
Related Weaknesses (CWE)
References
- http://packetstormsecurity.com/files/134622/Banner-Student-XSS-Information-DisclThird Party AdvisoryVDB Entry
- http://www.securityfocus.com/archive/1/537029/100/0/threadedThird Party AdvisoryVDB Entry
- http://packetstormsecurity.com/files/134622/Banner-Student-XSS-Information-DisclThird Party AdvisoryVDB Entry
- http://www.securityfocus.com/archive/1/537029/100/0/threadedThird Party AdvisoryVDB Entry
FAQ
What is CVE-2015-4689?
CVE-2015-4689 is a vulnerability with a CVSS score of 9.8 (CRITICAL). Ellucian (formerly SunGard) Banner Student 8.5.1.2 through 8.7 allows remote attackers to reset arbitrary passwords via unspecified vectors, aka "Weak Password Reset."
How severe is CVE-2015-4689?
CVE-2015-4689 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2015-4689?
Check the references section above for vendor advisories and patch information. Affected products include: Ellucian Banner Student.