PT-2018-15678
CVE-2018-2632
·
Published
2018-01-18
·
Updated
2020-08-24
Description by
CVSS 3.1
4.3
MediumMetricsAV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Oracle Siebel CRM versions 16.0 and 17.0
Description
The issue affects the Siebel Engineering - Installer and Deployment component, specifically the Siebel Approval Manager subcomponent. It allows a low-privileged attacker with network access via HTTP to compromise the system, resulting in unauthorized read access to a subset of accessible data.
Recommendations
For versions 16.0 and 17.0, update to a version that includes a fix for this issue to prevent unauthorized access.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾