4.3

CVE-2006-0511

Blackboard Academic Suite 6.0 and earlier does not properly clear session information when de-authenticating a user who is idle, which allows subsequent users to log in as the previous user and gain privileges.  NOTE: the vendor has disputed this issue, saying that "This is a customer specific issue related to their Kerberos authentication single sign-on application and not a vulnerability in the Blackboard product.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
BlackboardBlackboard Version5.0
BlackboardBlackboard Version5.0.2
BlackboardBlackboard Version5.5
BlackboardBlackboard Version5.5.1
BlackboardBlackboard Version6.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.37% 0.281
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 4.3 3.1 6.4
AV:L/AC:L/Au:S/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www.osvdb.org/28023
http://www.securityfocus.com/archive/1/423654/100/0/threaded
http://www.securityfocus.com/archive/1/423686/100/0/threaded
http://www.securityfocus.com/archive/1/423778/100/0/threaded
http://www.securityfocus.com/bid/16438