PT-2021-2759
CVE-2021-2256
·
تاريخ النشر
2021-04-22
·
تاريخ التحديث
2021-04-29
الوصف من
CVSS 3.1
10
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions:
Oracle Storage Cloud Software Appliance versions prior to 16.3.1.4.2
Oracle E-Business Suite (affected versions not specified)
Description:
The issue is related to errors in the code of a subcomponent of Oracle E-Business Suite, specifically the Customer Tab component. It allows a remote attacker to gain unauthorized access to a device and disclose protected information using HTTP requests. For Oracle Storage Cloud Software Appliance, the vulnerability can be easily exploited by an unauthenticated attacker with network access via HTTP, potentially leading to the takeover of the appliance. This vulnerability may also impact additional products.
Recommendations:
For Oracle Storage Cloud Software Appliance versions prior to 16.3.1.4.2, update to version 16.3.1.4.2 or later.
For Oracle E-Business Suite, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾