PT-2017-6791

CVE-2015-4689

·

Published

2017-09-11

·

Updated

2019-03-13

Description by

CVSS 2.0
5.0
Medium
MetricsAV:N/AC:L/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions Ellucian Banner Student versions 8.5.1.2 through 8.7
Description The issue allows remote attackers to reset arbitrary passwords, which could lead to unauthorized access. The estimated number of potentially affected devices and details about real-world incidents are not specified.
Recommendations For versions 8.5.1.2 through 8.7, update to a version that addresses the weak password reset issue to prevent unauthorized password resets.
Exploitability
Fix
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾