PT-2019-1253 · Oracle · Oracle Argus Safety

Publicado 2019-01-15 · Atualizado 2020-08-24 · CVE-2019-2430

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:L/Au:S/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Oracle Argus Safety versions 8.1 through 8.2

Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle Argus Safety, resulting in unauthorized access to critical data or complete access to all Oracle Argus Safety accessible data. The vulnerability is easily exploitable and can be used by an attacker to gain access to sensitive information.

Recommendations For versions 8.1 and 8.2, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

BDU:2019-00403

CVE-2019-2430

Produtos afetados

Oracle Argus Safety

Referências · 6

• https://oracle.com/technetwork/security-advisory/cpujan2019-5072801.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-2430 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-2430 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2019-00403 · Nota de Segurança
• http://securityfocus.com/bid/106599 · Nota
• http://oracle.com/technetwork/security-advisory/cpujan2019-5072801.html · Aviso do Fabricante