PT-2023-9593 · Oracle · Oracle Banking Liquidity Management

CVE-2024-21281

·

Publicado

2023-12-07

·

Atualizado

2024-10-21

CVSS v2.0

6.1

Média

VetorAV:N/AC:H/Au:S/C:P/I:C/A:P
Name of the Vulnerable Software and Affected Versions Oracle Banking Liquidity Management version 14.7.0.6.0
Description The issue is related to incorrect clearance or release of resources in the Infrastructure component of Oracle Banking Liquidity Management. This can allow a remote attacker to gain unauthorized access to read, create, modify, or delete data, or cause a denial of service using the HTTP protocol. Successful attacks require human interaction from a person other than the attacker and can result in unauthorized access to critical data, as well as partial denial of service.
Recommendations For version 14.7.0.6.0, update to a newer version that contains a fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

HTTP Request/Response Smuggling

Improper Resource Release

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

BDU:2024-08603
CVE-2024-21281

Produtos afetados

Oracle Banking Liquidity Management