PT-2023-9593 · Oracle · Oracle Banking Liquidity Management
CVE-2024-21281
·
Publicado
2023-12-07
·
Atualizado
2024-10-21
CVSS v2.0
6.1
Média
| Vetor | AV:N/AC:H/Au:S/C:P/I:C/A:P |
Name of the Vulnerable Software and Affected Versions
Oracle Banking Liquidity Management version 14.7.0.6.0
Description
The issue is related to incorrect clearance or release of resources in the Infrastructure component of Oracle Banking Liquidity Management. This can allow a remote attacker to gain unauthorized access to read, create, modify, or delete data, or cause a denial of service using the HTTP protocol. Successful attacks require human interaction from a person other than the attacker and can result in unauthorized access to critical data, as well as partial denial of service.
Recommendations
For version 14.7.0.6.0, update to a newer version that contains a fix for this issue.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
HTTP Request/Response Smuggling
Improper Resource Release
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Oracle Banking Liquidity Management