Vulnerability in Blackboard Academic Suite
CVE-2005-4337
The login page in Blackboard Learning and Community Portal System in Academic Suite 6.3.1.424, 6.2.3.23, and other versions before 6 allows remote attackers to bypass authentication and gain privileges as other users via a modified user_id parameter and a "/" in the encoded_pw parameter.
EPSS: 0.015 (72.5th percentile) — read the EPSS interpretation.
Affected products
- Blackboard Academic_suite — versions 6.2.3.23, 6.3.1.424
- N/a — versions n/a
References
- cve@mitre.org (Exploit, x_refsource_MISC, Vendor Advisory)
- cve@mitre.org (x_refsource_OSVDB, vdb-entry)