PT-2013-1529 · Oracle · Jd Edwards Enterpriseone Tools+1

Publicado 2013-01-17 · Atualizado 2013-10-11 · CVE-2012-1678

Positive Technologies (AI Summary)

CVSS v2.0

3.5

Baixa

Vetor base

AV:N/AC:M/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Oracle JD Edwards Products versions 8.98 through 9.1 Oracle JD Edwards Products version 24

Description The issue affects confidentiality and is related to Enterprise Infrastructure SEC in the JD Edwards EnterpriseOne Tools component. It allows remote authenticated users to exploit the vulnerability.

Recommendations For Oracle JD Edwards Products versions 8.98 through 9.1, update to a version that includes the fix for this issue. For Oracle JD Edwards Products version 24, update to a version that includes the fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2012-1678

Produtos afetados

Jd Edwards Enterpriseone Tools

Jd Edwards Products

Referências · 3

• http://oracle.com/technetwork/topics/security/cpujan2013-1515902.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2012-1678 · Nota de Segurança
• http://mandriva.com/security/advisories?name=MDVSA-2013:150 · Aviso do Fabricante