PT-2013-4058 · Oracle+1 · Oracle E-Business Suite+1
Published
2013-05-27
·
Updated
2013-05-28
·
CVE-2013-2953
CVSS v2.0
4.3
Medium
| Vector | AV:N/AC:M/Au:N/C:N/I:P/A:N |
Name of the Vulnerable Software and Affected Versions
IBM InfoSphere Optim Data Growth for Oracle E-Business Suite versions 6.x through 9.x before 9.1.0.3
Description
The issue is related to the use of the MD5 algorithm for signatures in X.509 certificates, which can be exploited by man-in-the-middle attackers to spoof SSL servers via a crafted certificate.
Recommendations
For IBM InfoSphere Optim Data Growth for Oracle E-Business Suite versions 6.x through 9.x before 9.1.0.3, update to version 9.1.0.3 or later to resolve the issue.
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Ibm Infosphere Optim Data Growth For Oracle E-Business Suite
Oracle E-Business Suite