CVE-2015-4689: Critical severity ellucian banner vulnerability
Published Sep 11, 2017
·Updated
Ellucian (formerly SunGard) Banner Student 8.5.1.2 through 8.7 allows remote attackers to reset arbitrary passwords via unspecified vectors, aka "Weak Password Reset."
Affected Software
9 affected components
Ellucian Banner Student=8.5.1.2
Ellucian Banner Student=8.6.1
Ellucian Banner Student=8.6.2
Ellucian Banner Student=8.6.3
Ellucian Banner Student=8.6.4
Ellucian Banner Student=8.6.5
Ellucian Banner Student=8.6.6
Ellucian Banner Student=8.6.7
Ellucian Banner Student=8.7
Event History
Sep 11, 2017
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-4689?
CVE-2015-4689 is rated as high severity due to its ability to allow remote attackers to reset arbitrary passwords.
2
How do I fix CVE-2015-4689?
To fix CVE-2015-4689, apply the latest security patches provided by Ellucian for your version of Banner Student.
3
What versions of Ellucian Banner are affected by CVE-2015-4689?
CVE-2015-4689 affects Ellucian Banner Student versions 8.5.1.2 through 8.7.
4
What type of attack does CVE-2015-4689 enable?
CVE-2015-4689 enables remote password reset attacks, allowing unauthorized users to gain access.
5
Is CVE-2015-4689 being actively exploited?
While there is no public indication of active exploitation, the vulnerability presents a significant risk and should be addressed promptly.