Vulnerability in Oracle Application Testing Suite for Enterprise Manager
CVE-2016-0482

Currently unrated

Key Information:

Vendor
Oracle
Status
Application Testing Suite
Vendor
CVE Published:
21 January 2016

Summary

An unspecified vulnerability exists in the Oracle Application Testing Suite component of Oracle Enterprise Manager Grid Control, specifically affecting versions 12.4.0.2 and 12.5.0.2. This flaw allows remote attackers to compromise confidentiality through unknown vectors, potentially enabling them to exploit a directory traversal vulnerability in the DownloadServlet servlet. It is crucial for users of the affected products to ensure that their systems are updated to mitigate risks associated with unauthorized file access.

References

http://www.zerodayinitiative.com/advisories/ZDI-16-037
x_refsource_MISC
http://www.oracle.com/technetwork/topics/security/cpujan2...
x_refsource_CONFIRM
http://www.securityfocus.com/bid/81100
vdb-entryx_refsource_BID

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.