PT-2007-3477
CVE-2007-2135
·
Publicado
2007-04-24
·
Atualizado
2018-10-16
Descrição por
CVSS 2.0
7.8
AltaMétricasAV:N/AC:L/Au:N/C:C/I:N/A:N
The ADI BINARY component in the Oracle E-Business Suite allows remote attackers to download arbitrary documents from the APPS.FND DOCUMENTS table via the ADI DISPLAY REPORT function, when passed a certain parameter. NOTE: due to lack of details from Oracle, it is not clear whether this issue is related to other CVE identifiers such as CVE-2007-2126, CVE-2007-2127, or CVE-2007-2128.
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾