PT-2015-1838
CVE-2015-2623
·
تاريخ النشر
2015-07-16
·
تاريخ التحديث
2016-12-28
الوصف من
CVSS 2.0
4.3
متوسطةالمقاييسAV:N/AC:M/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions
Oracle GlassFish Server versions 3.0.1 through 3.1.2
Oracle WebLogic Server versions 10.3.6.0 through 12.1.3.0
Description
The issue is related to errors in the code of the Oracle GlassFish Server and Oracle WebLogic Server components in Oracle Fusion Middleware. It allows remote attackers to affect the integrity of information via unknown vectors related to Java Server Faces.
Recommendations
For Oracle GlassFish Server versions 3.0.1 through 3.1.2, update to a version that includes the fix for this issue.
For Oracle WebLogic Server versions 10.3.6.0 through 12.1.3.0, update to a version that includes the fix for this issue.
As a temporary workaround, consider restricting access to Java Server Faces components until a patch is available.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾