Vulnerability in Oracle Enterprise Manager Connector Framework

CVE-2020-2645

Summary

An improper access control vulnerability exists in the Connector Framework of Oracle's Enterprise Manager Base Platform. This easily exploitable flaw allows attackers with high privileges and network access via HTTP to gain unauthorized access to critical data. Successful exploitation can lead to unauthorized manipulations such as updates, inserts, or deletions of data within the Enterprise Manager, as well as the potential to cause partial denial of service. As a result, sensitive information could be compromised, impacting the confidentiality and integrity of the data managed by Oracle Enterprise Manager.

References