CVE-2008-3421

{"id": "CVE-2008-3421", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "[email protected]", "cvssData": {"version": "2.0", "baseScore": 4.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}]}, "published": "2008-07-31T17:41:00.000", "references": [{"url": "http://ceaseless.ws/bb-csrf/", "tags": ["URL Repurposed"], "source": "[email protected]"}, {"url": "http://secunia.com/advisories/31177", "tags": ["Vendor Advisory"], "source": "[email protected]"}, {"url": "http://www.securitytracker.com/id?1020559", "source": "[email protected]"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/43986", "source": "[email protected]"}, {"url": "http://ceaseless.ws/bb-csrf/", "tags": ["URL Repurposed"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://secunia.com/advisories/31177", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securitytracker.com/id?1020559", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/43986", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Primary", "source": "[email protected]", "description": [{"lang": "en", "value": "CWE-352"}]}], "descriptions": [{"lang": "en", "value": "Multiple cross-site request forgery (CSRF) vulnerabilities in Blackboard Academic Suite 8.0.260.7 allow remote attackers to hijack the authentication of student users for requests that change configuration and enrollments via unspecified input to (1) update_module.jsp, (2) enroll_course.pl, and (3) unenroll.jsp."}, {"lang": "es", "value": "M\u00faltiples vulnerabilidades de falsificaci\u00f3n de tipo cross-site request forgery (CSRF) en Blackboard Academic Suite versi\u00f3n 8.0.260.7, permiten a los atacantes remotos secuestrar la autenticaci\u00f3n de los usuarios alumnos para las peticiones que cambian la configuraci\u00f3n e inscripciones mediante entradas no especificadas en los archivos (1) update_module.jsp, (2) enroll_course.pl y (3) unenroll.jsp."}], "lastModified": "2025-04-09T00:30:58.490", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:blackboard:blackboard_academic_suite:8.0.260.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "090EBB60-326B-442C-9CAF-3A4E3A058D84"}], "operator": "OR"}]}], "sourceIdentifier": "[email protected]"}