PT-2020-3882
CVE-2020-14551
·
تاريخ النشر
2020-07-15
·
تاريخ التحديث
2020-07-21
الوصف من
CVSS 3.1
4.3
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Name of the Vulnerable Software and Affected Versions:
Oracle AutoVue version 21.0
Description:
The issue is related to insufficient access control in the Security component of Oracle AutoVue, allowing a remote attacker to modify, add, or delete data using the HTTP protocol. This can result in unauthorized access to some of Oracle AutoVue's accessible data.
Recommendations:
For Oracle AutoVue version 21.0, consider restricting access to the Security component until a patch is available. As a temporary workaround, limit the use of HTTP protocol to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾