Directory Traversal Vulnerability in Oracle Enterprise Manager Grid Control
CVE-2016-0481

Currently unrated

Key Information:

Vendor
Oracle
Status
Enterprise Manager Grid Control
Vendor
CVE Published:
21 January 2016

Summary

An unspecified vulnerability in the Oracle Application Testing Suite component of Oracle Enterprise Manager Grid Control can be exploited by remote attackers to potentially compromise confidentiality. This vulnerability appears to relate to the Test Manager for Web Apps functionality. Notably, it may allow unauthorized access to sensitive files through directory traversal techniques in certain parameters, such as scheduleReportName. Oracle has acknowledged this issue, but specifics on the attack vectors remain undisclosed.

References

http://www.securityfocus.com/bid/81097
vdb-entryx_refsource_BID
http://www.oracle.com/technetwork/topics/security/cpujan2...
x_refsource_CONFIRM
http://www.zerodayinitiative.com/advisories/ZDI-16-044
x_refsource_MISC

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.