Retired - Blackboard Learning System Access Validation Vulnerability

Bugtraq ID:	16438
Class:	Access Validation Error
CVE:
Remote:	No
Local:	Yes
Published:	Jan 31 2006 12:00AM
Updated:	Feb 07 2006 08:54PM
Credit:	jehnx is credited with the discovery of this vulnerability.
Vulnerable:	Blackboard Blackboard Academic Suite 6.2.3.23 Blackboard Blackboard 6.0 Blackboard Blackboard 5.5.1 Blackboard Blackboard 5.5 Blackboard Blackboard 5.0.2 Blackboard Blackboard 5.0
Not Vulnerable:

Retired - Blackboard Learning System Access Validation Vulnerability



Blackboard is prone to a vulnerability that may permit an attacker to gain access to another user account. This issue is due to an error in the authentication mechanism.

An attacker with a valid account that has access to a Blackboard session of another user that is currently timed out, can gain access to that user's account. Successful exploitation will grant the attacker complete access to the victim user's account.

This issue does not affect Blackboard directly, but is specific to a particular site. Therefore, this BID is being retired.

Retired - Blackboard Learning System Access Validation Vulnerability


An exploit is not required.

Retired - Blackboard Learning System Access Validation Vulnerability

Solution:

The vendor reports this issue does not affect Blackboard directly, but is specific to a particular site. Therefore, this BID is being retired.

Retired - Blackboard Learning System Access Validation Vulnerability

References:

• Blackboard Homepage (Blackboard)