PT-2014-4702 · Oracle · Oracle Fusion Middleware+1

Publicado 2014-04-16 · Atualizado 2014-06-21 · CVE-2014-2452

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Média

Vetor base

AV:N/AC:L/Au:S/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware version 11.1.1.5

Description The issue affects the availability of the system, allowing remote authenticated users to impact it via unknown vectors related to the Webserver Plugin in the Oracle Access Manager component.

Recommendations For Oracle Fusion Middleware version 11.1.1.5, consider restricting access to the Webserver Plugin in the Oracle Access Manager component to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2014-2452

Produtos afetados

Oracle Access Manager

Oracle Fusion Middleware

Referências · 5

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2452 · Nota
• http://oracle.com/technetwork/topics/security/cpuapr2014-1972952.html · Aviso do Fabricante
• http://packetstormsecurity.com/files/127047/Oracle-Access-Manager-Information-Disclosure.html · Nota
• http://securityfocus.com/bid/66865 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-2452 · Nota de Segurança