PT-2013-4590

CVE-2013-3749

·

Published

2013-07-17

·

Updated

2017-08-29

Description by

CVSS 2.0
3.5
Low
MetricsAV:N/AC:M/Au:S/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 11.5.10.2, 12.0.6, 12.1.3
Description The issue affects confidentiality and is related to Logging in the Oracle Application Object Library component. It is reported that the problem might be caused by the storage of credentials in the FND LOG MESSAGES database table or log files by native login pages. However, Oracle has not confirmed this information.
Recommendations For Oracle E-Business Suite version 11.5.10.2, update to a version that includes the July 2013 CPU fixes. For Oracle E-Business Suite version 12.0.6, update to a version that includes the July 2013 CPU fixes. For Oracle E-Business Suite version 12.1.3, update to a version that includes the July 2013 CPU fixes.
Exploitability
Fix
Researchers
Vendors
Affected products
Related identifiers
CVE-2013-3749
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com