PT-2015-1833 · Oracle · Oracle Endeca Information Discovery Studio+2

Steven Seeley · Publicado 2015-07-16 · Atualizado 2016-12-22 · CVE-2015-2606

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Oracle Endeca Information Discovery Studio (affected versions not specified) Oracle Endeca Information Discovery Integrator ETL Server (affected versions not specified)

Description The issue is related to errors in the code of the Oracle Endeca Information Discovery Studio component of the Oracle Fusion Middleware software platform. Exploitation of this issue may allow a remote attacker to compromise the integrity, availability, and confidentiality of information.

Recommendations For Oracle Endeca Information Discovery Studio, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For Oracle Endeca Information Discovery Integrator ETL Server, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-17

Identificadores relacionados

BDU:2015-11179

CVE-2015-2606

ZDI-15-352

Produtos afetados

Oracle Endeca Information Discovery Integrator Etl Server

Oracle Endeca Information Discovery Studio

Oracle Fusion Middleware

Referências · 7

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2606 · Nota
• https://bdu.fstec.ru/vul/2015-11179 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2015-2606 · Nota de Segurança
• http://oracle.com/technetwork/topics/security/cpujul2015-2367936.html · Aviso do Fabricante
• http://securityfocus.com/bid/75758 · Nota
• http://zerodayinitiative.com/advisories/ZDI-15-352 · Nota
• https://zerodayinitiative.com/advisories/ZDI-15-352 · Nota de Segurança