Vulnerability in Oracle Support Tools Affecting Automatic Service Request

CVE-2017-3232

Summary

A vulnerability exists within the Automatic Service Request (ASR) component of Oracle Support Tools prior to version 5.7. This flaw permits low-privileged users who have logged on to the infrastructure where ASR is hosted to exploit this weakness, granting them unauthorized access to sensitive data. Successful exploitation can lead to the compromise of all accessible ASR data, highlighting the need for prompt updates and robust security measures to safeguard vital information.

References