CVE-2015-5054: Medium severity ellucian banner vulnerability
Open redirect vulnerability in Ellucian (formerly SunGard) Banner Student 8.5.1.2 through 8.7 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in an unspecified parameter.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-5054?
CVE-2015-5054 is classified as a moderate severity vulnerability due to its potential to facilitate phishing attacks.
How do I fix CVE-2015-5054?
To mitigate CVE-2015-5054, update to the latest version of Ellucian Banner Student that addresses the open redirect vulnerability.
Which versions of Ellucian Banner are affected by CVE-2015-5054?
CVE-2015-5054 affects Ellucian Banner Student versions 8.5.1.2 through 8.7.
What kind of threat does CVE-2015-5054 pose?
CVE-2015-5054 poses a threat by allowing attackers to redirect users to arbitrary websites, potentially leading to phishing.
Is user input involved in the CVE-2015-5054 vulnerability?
Yes, CVE-2015-5054 arises from the handling of user-provided URLs in an unspecified parameter, enabling redirects.