PT-2011-3775 · Oracle · Oracle Communications Unified+1

Published 2011-10-18 · Updated 2012-01-12 · CVE-2011-2327

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Oracle Communications Unified component in Oracle Sun Products Suite version 7.0

Description The issue affects confidentiality and is related to the Delegated Administrator in the Oracle Communications Unified component. It allows local users to exploit the vulnerability via unknown vectors.

Recommendations For Oracle Communications Unified component in Oracle Sun Products Suite version 7.0, consider restricting access to the Delegated Administrator functionality until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2011-2327

Affected Products

Oracle Communications Unified

Oracle Sun Products Suite

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2011-2327 · Security Note
• http://oracle.com/technetwork/topics/security/cpuoct2011-330135.html · Vendor Advisory
• http://osvdb.org/76479 · Note
• http://secunia.com/advisories/46526 · Note
• http://securityfocus.com/bid/50258 · Note