CVE

Id
16615  
CVE No.
CVE-2006-0511  
Status
Candidate  
Description
** DISPUTED ** Blackboard Academic Suite 6.0 and earlier does not properly clear session information when de-authenticating a user who is idle, which allows subsequent users to log in as the previous user and gain privileges. NOTE: the vendor has disputed this issue, saying that "This is a customer specific issue related to their Kerberos authentication single sign-on application and not a vulnerability in the Blackboard product."  
Phase
Assigned (20060201)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
134072 16615 CVE-2006-0511 BUGTRAQ:20060201 Blackboard Authentication Error  View
134073 16615 CVE-2006-0511 URL:http://www.securityfocus.com/archive/1/archive/1/423654/100/0/threaded  View
134074 16615 CVE-2006-0511 BUGTRAQ:20060201 Re: Blackboard Authentication Error  View
134075 16615 CVE-2006-0511 URL:http://www.securityfocus.com/archive/1/423686/100/0/threaded  View
134076 16615 CVE-2006-0511 BUGTRAQ:20060202 Re: Blackboard Authentication Error  View
134077 16615 CVE-2006-0511 URL:http://www.securityfocus.com/archive/1/archive/1/423778/100/0/threaded  View
134078 16615 CVE-2006-0511 BID:16438  View
134079 16615 CVE-2006-0511 URL:http://www.securityfocus.com/bid/16438  View
134080 16615 CVE-2006-0511 OSVDB:28023  View

Related JVN