PT-2020-1449 · Oracle · Oracle Outside In Technology

Kasper Leigh Haabb · Published 2020-01-14 · Updated 2022-04-29 · CVE-2020-2576

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

Name of the Vulnerable Software and Affected Versions Oracle Outside In Technology version 8.5.4

Description The issue is related to a vulnerability in the Oracle Outside In Technology product, specifically in the Outside In Filters component. This vulnerability can be easily exploited by an unauthenticated attacker with network access via HTTP, allowing them to compromise Oracle Outside In Technology. Successful attacks can result in unauthorized access to update, insert, or delete some of the accessible data in Oracle Outside In Technology, as well as cause a partial denial of service. The vulnerability is associated with resource release errors in the Outside In Filters component.

Recommendations For Oracle Outside In Technology version 8.5.4, consider applying security patches or updates to fix the resource release errors in the Outside In Filters component to prevent exploitation. As a temporary workaround, restrict access to the Outside In Technology code to minimize the risk of unauthorized data access or denial of service attacks.

Fix

Improper Resource Release

Weakness Enumeration

CWE-404

Related Identifiers

BDU:2020-00432

CVE-2020-2576

Affected Products

Oracle Outside In Technology

References · 6

• https://osv.dev/vulnerability/CVE-2020-2576 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-2576 · Security Note
• https://oracle.com/security-alerts/cpujan2020.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2020-00432 · Security Note
• https://vuldb.com/?id.148846 · Note
• https://oracle.com/security-alerts/public-vuln-to-advisory-mapping.html · Note