PT-2017-11285
CVE-2017-10308
·
Published
2017-10-19
·
Updated
2019-10-03
Description by
CVSS 2.0
3.6
LowMetricsAV:L/AC:L/Au:N/C:P/I:P/A:N
Name of the Vulnerable Software and Affected Versions
Oracle Agile PLM versions 9.3.5 through 9.3.6
Description
The issue allows physical access to compromise Oracle Agile PLM, resulting in unauthorized update, insert, or delete access to some of Oracle Agile PLM's accessible data, as well as unauthorized read access to a subset of Oracle Agile PLM's accessible data.
Recommendations
For versions 9.3.5 and 9.3.6, update to a version that includes a fix for this issue to prevent unauthorized access to Oracle Agile PLM's data.
Found an issue in the description? Have something to add? Feel free to write us 👾