Authorization Flaw in Oracle Fusion Middleware's Identity Manager

CVE-2021-2458

Summary

A significant vulnerability has been identified in the Identity Manager component of Oracle Fusion Middleware. This flaw allows an attacker with low privileges who has network access via HTTP to compromise the Identity Manager system. Exploitation of this vulnerability necessitates human interaction from a user other than the attacker. Although the vulnerability is confined to Identity Manager, it can lead to far-reaching consequences, potentially impacting other associated products. Successful exploitation can grant unauthorized access to sensitive data, enabling attackers to update, insert, or delete crucial information, hence posing a risk of data loss and integrity. Effective security measures are essential to safeguard against such vulnerabilities.

References