Vulnerability in Mediation Engine of Oracle Communications Operations Monitor
CVE-2022-21398

5.4MEDIUM

Key Information:

Vendor
Oracle
Status
Communications Operations Monitor
Vendor
CVE Published:
19 January 2022

Summary

An improper authentication vulnerability exists in the Mediation Engine component of Oracle Communications Operations Monitor. This flaw allows a low-privileged attacker with network access via HTTP to compromise the system. While exploiting this vulnerability requires human interaction from someone other than the attacker, successful exploitation could result in unauthorized access to modify, delete, or read some of the accessible data within the Oracle Communications Operations Monitor. This vulnerability poses a risk as it could significantly impact additional products connected to the monitor.

Affected Version(s)

Communications Operations Monitor 3.4

Communications Operations Monitor 4.2

Communications Operations Monitor 4.3

References

https://www.oracle.com/security-alerts/cpujan2022.html
x_refsource_MISC

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.