CVE-2015-4689

CRITICAL

Ellucian Banner Student 8.5.1.2-8.7 - Weak Password Recovery Mechanism

Title source: llm

Description

Ellucian (formerly SunGard) Banner Student 8.5.1.2 through 8.7 allows remote attackers to reset arbitrary passwords via unspecified vectors, aka "Weak Password Reset."

References (2)

Core 2

Core References

Third Party Advisory, VDB Entry x_refsource_misc

http://packetstormsecurity.com/files/134622/Banner-Student-XSS-Information-Disclosure-Open-Redirect.html

Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq

http://www.securityfocus.com/archive/1/537029/100/0/threaded

Scores

CVSS v3 9.8

EPSS 0.0228

EPSS Percentile 80.8%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-640

Status published

Products (9)

ellucian/banner_student 8.5.1.2

ellucian/banner_student 8.6.1

ellucian/banner_student 8.6.2

ellucian/banner_student 8.6.3

ellucian/banner_student 8.6.4

ellucian/banner_student 8.6.5

ellucian/banner_student 8.6.6

ellucian/banner_student 8.6.7

ellucian/banner_student 8.7

Published Sep 11, 2017

Tracked Since Feb 18, 2026