CVE-2018-12989

The report-viewing feature in Pearson VUE Certiport Console 8 and IQSystem 7 before 2018-06-26 mishandles child processes and consequently launches Internet Explorer or Microsoft Edge as Administrator, which allows local users to gain privileges...

CVE-2018-12989

The CVE-2018-12989 vulnerability affects Pearson VUE Certiport Console 8 and IQSystem 7 prior to 2018-06-26. The root cause is mishandling of child processes, which causes Internet Explorer or Microsoft Edge to be launched with Administrator privileges, enabling local privilege escalation. Public...

CVE-2018-12989: Improper Preservation of Permissions

The report-viewing feature in Pearson VUE Certiport Console 8 and IQSystem 7 before 2018-06-26 mishandles child processes and consequently launches Internet Explorer or Microsoft Edge as Administrator, which allows local users to gain privileges...

PT-2018-11518

Name of the Vulnerable Software and Affected Versions Pearson VUE Certiport Console versions prior to 2018-06-26 IQSystem versions prior to 2018-06-26 Description The issue concerns the report-viewing feature mishandling child processes, leading to the launch of Internet Explorer or Microsoft Edg...

identity-internal.pearson.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-634068 Description| Value ---|--- Affected Website:| identity-internal.pearson.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

iam.pearson.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-633822 Description| Value ---|--- Affected Website:| iam.pearson.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

support.assessment.pearson.com XSS vulnerability

Open Bug Bounty ID: OBB-605718 Description| Value ---|--- Affected Website:| support.assessment.pearson.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

pearsonvue.com XSS vulnerability

Vulnerable URL: http://www.pearsonvue.com/accommodations/clientreview.asp?clientName=Reading+Instruction+Competence+Assessment+RICA=JavaSCript:promptOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| Yes, at 01.06.2017 Latest check for patch:| 01.06.2017 07:08 GMT Vulnerability type:| XS...

pearsoneducation.nl XSS vulnerability

Vulnerable URL: http://www.pearsoneducation.nl/catagory.asp?cat=dum" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 832698 VIP website status:| No Check pearsoneducation.nl SSL...

pearson.fr XSS vulnerability

Vulnerable URL: http://www.pearson.fr/recherche/?fa=recherche=%3Cimg+src%3Dx+onerror%3Dprompt%28%2FXSSPOSED%2F%29%3E Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 18:18 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

Pearson ProctorCache Hardcoded Credentials Security Bypass Vulnerability

Pearson ProctorCache is a server software package from Pearson USA that is installed on a Windows system on a local LAN. A security vulnerability exists in Pearson ProctorCache versions prior to 2015.1.17 that stems from the program using the same hardcoded password during installation for...

CVE-2015-0972

Pearson ProctorCache before 2015.1.17 uses the same hardcoded password across different customers' installations, which allows remote attackers to modify test metadata or cause a denial of service test disruption by leveraging knowledge of this password...

Hardcoded credentials

Pearson ProctorCache before 2015.1.17 uses the same hardcoded password across different customers' installations, which allows remote attackers to modify test metadata or cause a denial of service test disruption by leveraging knowledge of this password...

CVE-2015-0972

Pearson ProctorCache before 2015.1.17 uses the same hardcoded password across different customers' installations, which allows remote attackers to modify test metadata or cause a denial of service test disruption by leveraging knowledge of this password...

CVE-2015-0972

Pearson ProctorCache (server software installed on Windows, local LAN) prior to version 2015.1.17 is vulnerable due to a hard-coded administrative password that is not unique per installation. This allows an attacker with knowledge of the credential to remotely modify test metadata or disrupt tes...

PT-2015-4998

Name of the Vulnerable Software and Affected Versions Pearson ProctorCache versions prior to 2015.1.17 Description The issue allows remote attackers to modify test metadata or cause a denial of service by leveraging knowledge of a hardcoded password used across different customers' installations...

CVE-2015-0972: Undefined Security Weakness

Pearson ProctorCache before 2015.1.17 uses the same hardcoded password across different customers' installations, which allows remote attackers to modify test metadata or cause a denial of service test disruption by leveraging knowledge of this password...

Pearson ProctorCache contains hard coded credentials

Overview The Pearson ProctorCache software uses a hard coded password for administrative tasks. Description The ProctorCache is designed to cache the testing content, as well as cache the responses and maintain a client list of active test-takers. ProctorCache is a server software package install...

Pearson eSIS Enterprise Student Information System Stored XSS

Advisory ID: hag201477 Product: Pearson eSIS Enterprise Student Information System Vendor: PearsonVue Vulnerable Versions: Any version Advisory Publication: April 06, 2014 Vendor Notification: March 05, 2014 Public Disclosure: April 06, 2014 Vulnerability Type: Cross-Site Scripting CWE-79 CVE...

CVE-2014-1455

SQL injection vulnerability in the password reset functionality in Pearson eSIS Enterprise Student Information System, possibly 3.3.0.13 and earlier, allows remote attackers to execute arbitrary SQL commands via the new password...