PT-2017-15987 · Oracle · Oracle Identity Manager

Publicado 2017-04-24 · Atualizado 2019-10-03 · CVE-2017-3553

Positive Technologies (AI Summary)

CVSS v3.1

9.9

Crítica

Vetor base

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Oracle Identity Manager version 11.1.2.3.0

Description The issue affects the Rules Engine subcomponent of Oracle Identity Manager, allowing a low-privileged attacker with network access via HTTP to compromise Oracle Identity Manager. This can result in the takeover of Oracle Identity Manager and may have significant impacts on additional products.

Recommendations For Oracle Identity Manager version 11.1.2.3.0, update to a version that includes a fix for this issue to prevent potential exploitation.

Correção

Identificadores relacionados

CVE-2017-3553

Produtos afetados

Oracle Identity Manager

Referências · 5

• http://securityfocus.com/bid/97728 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-3553 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2017-3553 · Aviso do Fabricante
• http://securitytracker.com/id/1038291 · Nota
• http://oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html · Aviso do Fabricante