Database Server Vulnerability in Oracle's Core RDBMS Component

CVE-2020-2527

Summary

This vulnerability exists within the Core RDBMS component of Oracle Database Server, where a high-privileged attacker able to use Create Index and Create Table privileges, with network access through OracleNet, can exploit the weakness. Such an exploitation can lead to unauthorized read access to sensitive data within the RDBMS. The impact of attacks extends beyond the Core RDBMS, potentially affecting various interconnected products. Users should implement appropriate security measures to mitigate potential risks associated with this vulnerability.

References