Vulnerability in Oracle Support Tools Automatic Service Request Component

CVE-2017-3619

Summary

A vulnerability exists in the Automatic Service Request (ASR) component of Oracle Support Tools, specifically impacting the ASR Manager in versions prior to 5.7. This flaw allows low privileged attackers who have logged on to the infrastructure hosting ASR to potentially compromise the service. Successful exploitation of this vulnerability can lead to unauthorized access to sensitive data, thereby posing significant risks to the integrity of all data accessible via ASR. Given its ease of exploitation, organizations utilizing affected versions should prioritize immediate remediation.

References