PT-2018-15847 · Oracle · Oracle Data Visualization Desktop

Publicado 2018-04-19 · Atualizado 2019-10-03 · CVE-2018-2834

Positive Technologies (AI Summary)

CVSS v3.1

8.5

Alta

Vetor base

AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:H

Name of the Vulnerable Software and Affected Versions Oracle Data Visualization Desktop version 12.2.4.1.1

Description The issue allows an unauthenticated attacker with logon to the infrastructure where Oracle Data Visualization Desktop executes to compromise Oracle Data Visualization Desktop. Successful attacks require human interaction from a person other than the attacker. Attacks may significantly impact additional products and can result in unauthorized creation, deletion, or modification access to critical data, as well as unauthorized read access to a subset of Oracle Data Visualization Desktop accessible data. Additionally, attacks can cause a hang or frequently repeatable crash of Oracle Data Visualization Desktop.

Recommendations For Oracle Data Visualization Desktop version 12.2.4.1.1, refer to My Oracle Support Note 2384640.1 for instructions on how to address this issue.

Correção

Identificadores relacionados

CVE-2018-2834

Produtos afetados

Oracle Data Visualization Desktop

Referências · 5

• http://securitytracker.com/id/1040695 · Nota
• http://securityfocus.com/bid/103792 · Nota
• https://osv.dev/vulnerability/CVE-2018-2834 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-2834 · Nota de Segurança
• http://oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html · Aviso do Fabricante