PT-2024-1155 · Oracle · Oracle Audit Vault/Database Firewall

Published 2024-01-16 · Updated 2024-01-23 · CVE-2024-20910

Positive Technologies (AI Summary)

CVSS v3.1

3.0

Low

Base vector

AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Oracle Audit Vault and Database Firewall versions 20.1 through 20.9

Description The issue is related to insufficient input validation in the Firewall component of Oracle Audit Vault and Database Firewall, allowing a remote attacker to gain unauthorized access to protected information. The vulnerability is difficult to exploit and requires high privileges and network access via Oracle Net. Successful attacks can result in unauthorized read access to a subset of Oracle Audit Vault and Database Firewall accessible data. The vulnerability may also impact additional products.

Recommendations For versions 20.1 through 20.9, consider restricting access to the Firewall component until a patch is available. As a temporary workaround, limit network access via Oracle Net to minimize the risk of exploitation. Avoid using the vulnerable Firewall component in the Oracle Audit Vault and Database Firewall until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

RCE

Weakness Enumeration

CWE-200

CWE-20

Related Identifiers

BDU:2024-00477

CVE-2024-20910

Affected Products

Oracle Audit Vault/Database Firewall

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2024-20910 · Security Note
• https://oracle.com/security-alerts/cpujan2024.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-00477 · Security Note
• https://osv.dev/vulnerability/CVE-2024-20910 · Vendor Advisory
• https://twitter.com/CVEnew/status/1747458207914631482 · Twitter Post
• https://cybersecurity-help.cz/vdb/SB2024011654 · Note