CVE-2006-0511
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:S/C:P/I:P/A:P
AI Score
Confidence
Low
EPSS
Percentile
30.4%
Blackboard Academic Suite 6.0 and earlier does not properly clear session information when de-authenticating a user who is idle, which allows subsequent users to log in as the previous user and gain privileges. NOTE: the vendor has disputed this issue, saying that "This is a customer specific issue related to their Kerberos authentication single sign-on application and not a vulnerability in the Blackboard product.
Affected configurations
| Vendor | Product | Version | CPE |
|---|---|---|---|
| blackboard | blackboard | 5.0 | cpe:2.3:a:blackboard:blackboard:5.0:*:*:*:*:*:*:* |
| blackboard | blackboard | 5.0.2 | cpe:2.3:a:blackboard:blackboard:5.0.2:*:*:*:*:*:*:* |
| blackboard | blackboard | 5.5 | cpe:2.3:a:blackboard:blackboard:5.5:*:*:*:*:*:*:* |
| blackboard | blackboard | 5.5.1 | cpe:2.3:a:blackboard:blackboard:5.5.1:*:*:*:*:*:*:* |
| blackboard | blackboard | 6.0 | cpe:2.3:a:blackboard:blackboard:6.0:*:*:*:*:*:*:* |
| blackboard | blackboard_academic_suite | 6.0 | cpe:2.3:a:blackboard:blackboard_academic_suite:6.0:*:*:*:*:*:*:* |
Related
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:S/C:P/I:P/A:P
AI Score
Confidence
Low
EPSS
Percentile
30.4%