CVE-2015-4688: Infoleak
Published Sep 11, 2017
·Updated
Ellucian (formerly SunGard) Banner Student 8.5.1.2 through 8.7 allow remote attackers to enumerate user accounts via a series of requests.
Affected Software
9 affected components
Ellucian Banner Student=8.5.1.2
Ellucian Banner Student=8.6.1
Ellucian Banner Student=8.6.2
Ellucian Banner Student=8.6.3
Ellucian Banner Student=8.6.4
Ellucian Banner Student=8.6.5
Ellucian Banner Student=8.6.6
Ellucian Banner Student=8.6.7
Ellucian Banner Student=8.7
Event History
Sep 11, 2017
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-4688?
CVE-2015-4688 is considered a medium severity vulnerability as it allows remote attackers to enumerate user accounts.
2
How do I fix CVE-2015-4688?
To address CVE-2015-4688, update your Ellucian Banner Student application to the latest version provided by the vendor.
3
Which versions of Ellucian Banner are affected by CVE-2015-4688?
CVE-2015-4688 affects Ellucian Banner Student versions 8.5.1.2 through 8.7.
4
What type of attack does CVE-2015-4688 enable?
CVE-2015-4688 enables remote attackers to perform user account enumeration attacks.
5
Can CVE-2015-4688 be exploited without authentication?
Yes, CVE-2015-4688 can potentially be exploited by attackers without authentication, allowing them to gather user account information.