High Privilege Vulnerability in Oracle Hyperion Infrastructure Technology Lifecycle Management

CVE-2021-2347

Summary

A vulnerability has been identified in Oracle's Hyperion Infrastructure Technology, specifically within the Lifecycle Management component. This security flaw allows a highly privileged attacker with network access via HTTP to exploit the system. While successful attacks require the interaction of an unsuspecting user, they can lead to unauthorized access to critical information and comprehensive access to all data accessible through Hyperion Infrastructure Technology. Additionally, this flaw permits unauthorized operations such as update, insert, or deletion of some critical data, exposing the organization to significant risks.

References