Unauthorized Access Vulnerability in Oracle's OSS Support Tools
CVE-2018-2617

7.5HIGH

Key Information:

Vendor
Oracle
Status
Oss Support Tools
Vendor
CVE Published:
18 January 2018

Summary

The OSS Support Tools component of Oracle Support Tools is susceptible to a vulnerability that allows unauthenticated attackers with network access via HTTP to exploit the system. This susceptibility facilitates the potential for unauthorized access to sensitive data and may result in complete compromise of OSS Support Tools accessible data. This highlights the importance of updating to at least version 2.11.33 to mitigate the risk associated with this vulnerability.

Affected Version(s)

OSS Support Tools < 2.11.33

References

http://www.oracle.com/technetwork/security-advisory/cpuja...
x_refsource_CONFIRM
http://www.securityfocus.com/bid/102645
vdb-entryx_refsource_BID

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.