PT-2013-3179 · Oracle · Oracle Coreid Access+1

Published 2013-04-17 · Updated 2013-10-11 · CVE-2013-1497

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware version 10.1.4.3.0

Description The issue affects the integrity of the system, allowing remote attackers to exploit it via unknown vectors related to the WebGate - WebServer plugin in the Oracle COREid Access component.

Recommendations For Oracle Fusion Middleware version 10.1.4.3.0, consider restricting access to the WebGate - WebServer plugin until a fix is available.

Fix

Related Identifiers

CVE-2013-1497

Affected Products

Oracle Coreid Access

Oracle Fusion Middleware

References · 4

• http://oracle.com/technetwork/topics/security/cpuapr2013-1899555.html · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDVSA-2013:150 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2013-1497 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1497 · Note