CVE-2010-3245

The automated-backup functionality in Blackboard Transact Suite (formerly Blackboard Commerce Suite) stores the (1) database username and (2) database password in cleartext in (a) script and (b) batch (.bat) files, which allows local users to obtain sensitive information by reading a file.

Score

CVSS 2.0 2.1 Low

Status

Modified - cve@mitre.org

Published

2010-09-07

Last modified

2024-09-17

Weaknesses

CWE-200

Affected products

• Transact Suite (Blackboard)

References

• http://www.kb.cert.org/vuls/id/204055
• http://www.kb.cert.org/vuls/id/MAPG-86YPVM