CVE-2015-4689

Critical

Published: 11/09/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Ellucian Banner Student versions 8.5.1.2 through 8.7 allow remote attackers to reset arbitrary passwords via unspecified vectors, referred to as 'Weak Password Reset.'

Risk Assessment

Attackers may gain access to user accounts, potentially leading to data breaches and security violations.

Recommendation

It is recommended to upgrade to the latest version of the software and implement stronger password reset mechanisms.

Original NVD description (English source)

Ellucian (formerly SunGard) Banner Student 8.5.1.2 through 8.7 allows remote attackers to reset arbitrary passwords via unspecified vectors, aka "Weak Password Reset."