PT-2016-6577
CVE-2016-5602
·
تاريخ النشر
2016-10-25
·
تاريخ التحديث
2017-07-29
الوصف من
CVSS 3.1
5.7
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Oracle Data Integrator versions 11.1.1.7.0 through 11.1.1.9.0
Oracle Data Integrator versions 12.1.3.0.0 through 12.2.1.1.0
Description
The issue affects confidentiality and is related to the Code Generation Engine in the Oracle Data Integrator component. It can be exploited by remote authenticated users.
Recommendations
For Oracle Data Integrator versions 11.1.1.7.0 through 11.1.1.9.0, update to a version that includes the fix for this issue.
For Oracle Data Integrator versions 12.1.3.0.0 through 12.2.1.1.0, update to a version that includes the fix for this issue.
As a temporary workaround, consider restricting access to the Code Generation Engine to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾