CVE-2023-21994

Name of the Vulnerable Software and Affected Versions Oracle Mobile Security Suite versions prior to 11.1.2.3.1

Description The issue is related to errors in processing input data in the Android Mobile Authenticator App component of the Oracle Mobile Security Suite product. This can allow an attacker to gain unauthorized access to protected information. Successful attacks can result in unauthorized access to critical data or complete access to all accessible data.

Recommendations For versions prior to 11.1.2.3.1, update to version 11.1.2.3.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the physical communication segment attached to the hardware where the Oracle Mobile Security Suite executes to minimize the risk of exploitation.