Unauthenticated Access Vulnerability in Oracle Communications Diameter Signaling Router
CVE-2019-2399

6.5MEDIUM

Key Information:

Vendor

Oracle
Status
Communications Diameter Signaling Router (dsr)
Vendor
CVE Published:
16 January 2019

What is CVE-2019-2399?

The vulnerability in Oracle's Diameter Signaling Router (DSR) component allows an unauthenticated attacker with network access via HTTP to compromise the system. Exploiting this vulnerability can lead to unauthorized read access to sensitive data and a potential partial denial of service (DoS). This security issue affects versions of the DSR prior to 8.3, presenting significant security risks for organizations relying on Oracle Communications Applications.

Affected Version(s)

Communications Diameter Signaling Router (DSR) < 8.3

References

http://www.securityfocus.com/bid/106580
vdb-entryx_refsource_BID
http://www.oracle.com/technetwork/security-advisory/cpuja...
x_refsource_CONFIRM

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.