CVE-2010-3244: Blackboard Transact Suite

Medium severity, CVSS 4.6. EPSS: 0.3% chance of exploitation in the next 30 days.

BbtsConnection_Edit.exe in Blackboard Transact Suite (formerly Blackboard Commerce Suite) before 3.6.0.2 relies on field names when determining whether it is appropriate to decrypt a connection.xml field value, which allows local users to discover the database password via a modified connection.xml file that contains an encrypted password in the <Server> field.

Affected products

• Blackboard Transact Suite: up to and including 3.6.0.1

Published 2010-09-07. Last modified 2026-06-16.