CVE-2010-3244 | BDVDB-2026-43172 Detail

Description#

BbtsConnection_Edit.exe in Blackboard Transact Suite (formerly Blackboard Commerce Suite) before 3.6.0.2 relies on field names when determining whether it is appropriate to decrypt a connection.xml field value, which allows local users to discover the database password via a modified connection.xml file that contains an encrypted password in the <Server> field.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.kb.cert.org/vuls/id/MAPG-86YPVM
http://www.kb.cert.org/vuls/id/204055

Exploit#

No public exploit known

History#

Version 12010-09-07Record published in the CVE List.
Version 22024-09-16Most recent update recorded in the CVE List.