PT-2013-4590 · Oracle · Oracle E-Business Suite

Jeff Kayser · Publicado 2013-07-17 · Atualizado 2017-08-29 · CVE-2013-3749

Positive Technologies (AI Summary)

CVSS v2.0

3.5

Baixa

Vetor base

AV:N/AC:M/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 11.5.10.2, 12.0.6, 12.1.3

Description The issue affects confidentiality and is related to Logging in the Oracle Application Object Library component. It is reported that the problem might be caused by the storage of credentials in the FND LOG MESSAGES database table or log files by native login pages. However, Oracle has not confirmed this information.

Recommendations For Oracle E-Business Suite version 11.5.10.2, update to a version that includes the July 2013 CPU fixes. For Oracle E-Business Suite version 12.0.6, update to a version that includes the July 2013 CPU fixes. For Oracle E-Business Suite version 12.1.3, update to a version that includes the July 2013 CPU fixes.

Correção

Identificadores relacionados

CVE-2013-3749

Produtos afetados

Oracle E-Business Suite

Referências · 8

• http://securityfocus.com/bid/61268 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/85673 · Nota
• http://secunia.com/advisories/54222 · Nota
• http://securitytracker.com/id/1028799 · Nota
• http://kb.cert.org/vuls/id/826463 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2013-3749 · Nota de Segurança
• http://oracle.com/technetwork/topics/security/cpujuly2013-1899826.html · Aviso do Fabricante
• http://osvdb.org/95286 · Nota