Design Tools Vulnerability in JD Edwards EnterpriseOne by Oracle

CVE-2022-21631

Summary

An easily exploitable authorization bypass vulnerability exists in the Design Tools component of JD Edwards EnterpriseOne Tools. This flaw allows an unauthenticated attacker with HTTP network access to compromise the security of JD Edwards EnterpriseOne. Successful exploitation relies on user interaction from a third party, while the main vulnerability resides within JD Edwards EnterpriseOne Tools, the impact can extend to additional products, effectively broadening the scope of the attack. Attacks could enable unauthorized actions such as updates, inserts, or deletions of data, and may also allow unauthorized reading of certain accessible data within the JD Edwards EnterpriseOne Tools.

References