PT-2014-3623 · Oracle · Oracle Secure Global Desktop

Published 2014-01-15 · Updated 2017-08-29 · CVE-2014-0419

Positive Technologies (AI Summary)

CVSS v2.0

5.1

Medium

Base vector

AV:N/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Oracle Secure Global Desktop versions prior to 4.63 with December 2013 PSU Oracle Secure Global Desktop version 4.71 Oracle Secure Global Desktop version 5.0 with December 2013 PSU Oracle Secure Global Desktop version 5.10

Description The issue affects confidentiality, integrity, and availability. It is related to the Administration Console and Workspace Web Applications. The estimated number of potentially affected devices and details about real-world incidents are not specified.

Recommendations For Oracle Secure Global Desktop versions prior to 4.63, apply the December 2013 PSU. For Oracle Secure Global Desktop version 4.71, update to a version that includes the fix. For Oracle Secure Global Desktop version 5.0, apply the December 2013 PSU. For Oracle Secure Global Desktop version 5.10, update to a version that includes the fix.

Fix

Related Identifiers

CVE-2014-0419

Affected Products

Oracle Secure Global Desktop

References · 7

• http://oracle.com/technetwork/topics/security/cpujan2014-1972949.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2014-0419 · Security Note
• http://securityfocus.com/bid/64758 · Note
• http://securityfocus.com/bid/64902 · Note
• http://osvdb.org/102110 · Note
• http://securitytracker.com/id/1029610 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/90367 · Note