CVE-2022-21442

Name of the Vulnerable Software and Affected Versions Oracle GoldenGate versions prior to 23.1

Description The issue is related to insufficient input validation in the OGG Core Library of Oracle GoldenGate, allowing a low-privileged attacker with logon access to the infrastructure to compromise Oracle GoldenGate. Successful attacks can result in the takeover of Oracle GoldenGate and may have a significant impact on additional products.

Recommendations For versions prior to 23.1, update to version 23.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the OGG Core Library to minimize the risk of exploitation.