The vulnerability, fixed last November, allowed access to current and previous class schedules for any student.