CVE-2020-14551

Name of the Vulnerable Software and Affected Versions: Oracle AutoVue version 21.0

Description: The issue is related to insufficient access control in the Security component of Oracle AutoVue, allowing a remote attacker to modify, add, or delete data using the HTTP protocol. This can result in unauthorized access to some of Oracle AutoVue's accessible data.

Recommendations: For Oracle AutoVue version 21.0, consider restricting access to the Security component until a patch is available. As a temporary workaround, limit the use of HTTP protocol to minimize the risk of exploitation.