PT-2020-1465 · Oracle · Oracle Autovue

Owais Zaman · Published 2020-01-14 · Updated 2022-10-25 · CVE-2020-2592

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Oracle AutoVue version 21.0.2

Description The issue is related to a lack of protection for service data in the Security component of Oracle AutoVue, allowing an unauthenticated attacker with network access via HTTP to compromise Oracle AutoVue. Successful attacks can result in unauthorized read access to a subset of Oracle AutoVue accessible data.

Recommendations For Oracle AutoVue version 21.0.2, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

BDU:2020-00448

CVE-2020-2592

Affected Products

Oracle Autovue

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2020-2592 · Security Note
• https://bdu.fstec.ru/vul/2020-00448 · Security Note
• https://oracle.com/security-alerts/cpujan2020.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-2592 · Vendor Advisory
• https://vuldb.com/?id.148988 · Note
• https://oracle.com/security-alerts/public-vuln-to-advisory-mapping.html · Note