Lucene search
HistoryOct 03, 2022 - 4:20 p.m.
CVE-2010-3245
cve-2010-3245
blackboard
transact suite
automated-backup
security
vulnerability
nvd
cleartext
sensitive information
2.1 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
6 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
0.4%
The automated-backup functionality in Blackboard Transact Suite (formerly Blackboard Commerce Suite) stores the (1) database username and (2) database password in cleartext in (a) script and (b) batch (.bat) files, which allows local users to obtain sensitive information by reading a file.
Affected configurations
Node
blackboardtransact_suiteMatch-
| CPE | Name | Operator | Version |
|---|---|---|---|
| blackboard:transact_suite | blackboard transact suite | eq | - |
Related
prion
prion
Design/Logic Flaw
2010-09-07 18:00:00
cvelist
cvelist
CVE-2010-3245
2022-10-03 16:20:55
nvd
nvd
CVE-2010-3245
2010-09-07 18:00:02
2.1 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
6 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
0.4%
Related for CVE-2010-3245