PT-2013-4590 · Oracle · Oracle E-Business Suite

Jeff Kayser · Published 2013-07-17 · Updated 2017-08-29 · CVE-2013-3749

Positive Technologies (AI Summary)

CVSS v2.0

3.5

Low

Base vector

AV:N/AC:M/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 11.5.10.2, 12.0.6, 12.1.3

Description The issue affects confidentiality and is related to Logging in the Oracle Application Object Library component. It is reported that the problem might be caused by the storage of credentials in the FND LOG MESSAGES database table or log files by native login pages. However, Oracle has not confirmed this information.

Recommendations For Oracle E-Business Suite version 11.5.10.2, update to a version that includes the July 2013 CPU fixes. For Oracle E-Business Suite version 12.0.6, update to a version that includes the July 2013 CPU fixes. For Oracle E-Business Suite version 12.1.3, update to a version that includes the July 2013 CPU fixes.

Fix

Related Identifiers

CVE-2013-3749

Affected Products

Oracle E-Business Suite

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2013-3749 · Security Note
• http://oracle.com/technetwork/topics/security/cpujuly2013-1899826.html · Vendor Advisory
• http://securityfocus.com/bid/61268 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/85673 · Note
• http://secunia.com/advisories/54222 · Note
• http://securitytracker.com/id/1028799 · Note
• http://kb.cert.org/vuls/id/826463 · Note
• http://osvdb.org/95286 · Note