PT-2011-1013
CVE-2014-0377
·
تاريخ النشر
2011-09-06
·
تاريخ التحديث
2014-03-06
الوصف من
CVSS 2.0
5.0
متوسطةالمقاييسAV:N/AC:L/Au:N/C:N/I:N/A:P
Name of the Vulnerable Software and Affected Versions
Oracle Database Server versions 11.1.0.7 through 11.2.0.4
Oracle Database Server version 12.1.0.1
Description
The issue allows remote authenticated users to affect confidentiality, potentially via vectors related to SYS tables. Multiple vulnerabilities in the current Oracle setup enable remote attackers to bypass security restrictions, execute arbitrary SQL commands, and access confidential data.
Recommendations
For Oracle Database Server versions 11.1.0.7 through 11.2.0.4, consider restricting access to SYS tables until a patch is available.
For Oracle Database Server version 12.1.0.1, restrict access to sensitive data and limit privileges to mitigate the risk of exploitation.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾