PT-2013-3732 · Oracle · Oracle Retail Central Office

Publicado 2013-04-17 · Atualizado 2013-10-11 · CVE-2013-2397

Positive Technologies (AI Summary)

CVSS v2.0

5.5

Média

Vetor base

AV:N/AC:L/Au:S/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Oracle Retail Central Office versions 13.1 through 13.4

Description The issue affects confidentiality and integrity, allowing remote authenticated users to exploit it via unknown vectors related to Customer Operations, specifically the Add and Search functions.

Recommendations For versions 13.1 through 13.4, update to a version that includes the fix for this issue to prevent exploitation.

Correção

Identificadores relacionados

CVE-2013-2397

Produtos afetados

Oracle Retail Central Office

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2013-2397 · Nota de Segurança
• http://mandriva.com/security/advisories?name=MDVSA-2013:150 · Aviso do Fabricante
• http://oracle.com/technetwork/topics/security/cpuapr2013-1899555.html · Aviso do Fabricante