PT-2021-7172 · Oracle · Oracle Outside In Technology

Girlelecta · Published 2021-07-20 · Updated 2021-09-23 · CVE-2021-2450

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Oracle Outside In Technology version 8.5.5

Description The issue exists due to insufficient input validation in the Outside In Filters component of Oracle Outside In Technology. This allows a remote attacker to cause a denial of service via the HTTP protocol. Successful attacks can result in unauthorized ability to cause a hang or frequently repeatable crash of Oracle Outside In Technology, potentially leading to a complete denial of service. Outside In Technology is a suite of software development kits, and the impact depends on how the software using it handles network data.

Recommendations For version 8.5.5, update to a newer version that contains a fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2022-03655

CVE-2021-2450

Affected Products

Oracle Outside In Technology

References · 5

• https://oracle.com/security-alerts/cpujul2021.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-2450 · Security Note
• https://bdu.fstec.ru/vul/2022-03655 · Security Note
• https://osv.dev/vulnerability/CVE-2021-2450 · Vendor Advisory
• https://t.me/cvenotify/17945 · Telegram Post