VULNERABILITY INTELLIGENCE
CVE-2008-1883
CVSS score6.8 MEDIUM
EPSS probability1.26%
CISA KEVNot currently listed
Published2008-04-18
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:P/I:P/A:P
Description
The server in Blackboard Academic Suite 7.x stores MD5 password hashes that are provided directly by clients, which makes it easier for remote attackers to access accounts via a modified client that skips the javascript/md5.js hash calculation, and instead sends an arbitrary MD5 string.
Weakness classification
- CWE-287: Improper Authentication