Xzcxzczcxzczc

In: English and Literature

Submitted By tylers77
Words 14684
Pages 59
Blackboard Security Assessment
M. van Eekelen, R. Ben Moussa, E. Hubbers en R. Verdult Institute for Computing and Information Sciences Radboud University Nijmegen Technical Report ICIS-R13004, April 2013 Radboud University Nijmegen LaQuSo1 July 15, 20112

1 2

LaQuSo is a joint activity of Technische Universiteit Eindhoven and Radboud Universiteit Nijmegen published April 15, 2013, after a mutually agreed responsible non-disclosure period

Contents
I Advice in connection with the LaQuSo Blackboard SP5 Security Review Report 3 II Blackboard 9.1 SP5 Security Review Report 6
7 8 9 10 10 12 12 12 14 15 16 23 25 27

Management Summary 1 The task 2 The results 2.1 Successful attacks . . . . . . . . . . . . . . . . . . . . . . . 2.1.1 Cross site scripting . . . . . . . . . . . . . . . . . . 2.1.2 Secondary vulnerabilities . . . . . . . . . . . . . . 2.2 Attacks . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2.2.1 Exploit 1: Session stealing . . . . . . . . . . . . . . 2.2.2 Exploit 2: Credential phishing . . . . . . . . . . . 2.2.3 Exploit 3: Improper access control (authorization) 2.3 Unsuccessful tests . . . . . . . . . . . . . . . . . . . . . . . 2.4 Test and production servers, patches and releases . . . . . 3 Security by design 4 Conclusions

. . . . . . . . .

. . . . . . . . .

. . . . . . . . .

. . . . . . . . .

. . . . . . . . .

. . . . . . . . .

. . . . . . . . .

. . . . . . . . .

. . . . . . . . .

. . . . . . . . .

. . . . . . . . .

. . . . . . . . .

. . . . . . . . .

. . . . . . . . .

1

Abstract
A security assessment is given of the BlackBoard Learn electronic learning environment. As a result of this assessment (which is given in Part II) and the accompanying advice (which is given in Part I) the board of the Radboud University Nijmegen decided in 2011 until further notice to stop with…...

Similar Documents

Men's Christmas Long Sleeve Button Down T-shirt Tops Slim Fit Xmas Dress Shirts | Adibu / Adibou: Aventure dans le corps humain | Gladys George