The issue is related to a resource release error in the Federation subcomponent of Oracle Access Manager, part of Oracle Fusion Middleware. It allows an unauthenticated attacker with network access via HTTP to compromise Oracle Access Manager, requiring human interaction from a person other than the attacker. Successful attacks can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Access Manager.