Information disclosure in Blackboard Transact Suite

CVE-2010-3245

The automated-backup functionality in Blackboard Transact Suite (formerly Blackboard Commerce Suite) stores the (1) database username and (2) database password in cleartext in (a) script and (b) batch (.bat) files, which allows local users to obtain sensitive information by reading a file.

Vulnerability class: Information Disclosure

EPSS: 0.009 (55.3th percentile) — read the EPSS interpretation.

Affected products

Blackboard Transact_suite
N/a — versions n/a

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

cve@mitre.org (US Government Resource, x_refsource_MISC)
cve@mitre.org (x_refsource_CERT-VN, US Government Resource, third-party-advisory)