PT-2020-4422
CVE-2020-14745
·
تاريخ النشر
2020-10-21
·
تاريخ التحديث
2020-10-22
الوصف من
CVSS 3.1
4.3
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions:
Oracle REST Data Services versions 11.2.0.4 through 19c
Standalone ORDS versions prior to 20.2.1
Description:
The issue is related to security mechanism errors in the General component of Oracle REST Data Services. It allows a low-privileged attacker with network access via HTTP to compromise Oracle REST Data Services, resulting in unauthorized read access to a subset of Oracle REST Data Services accessible data.
Recommendations:
For Oracle REST Data Services versions 11.2.0.4 through 19c, update to a version later than 19c or apply the necessary patch.
For Standalone ORDS versions prior to 20.2.1, update to version 20.2.1 or later.
As a temporary workaround, consider restricting access to the HTTP endpoint to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾