CVE-2012-3154 - Unspecified vulnerability in the Oracle Agile PLM Framework component in Oracle Supply Chain Product

CVE-2012-3154

Summary

Unspecified vulnerability in the Oracle Agile PLM Framework component in Oracle Supply Chain Products Suite 9.3.1.0 allows remote authenticated users to affect confidentiality, related to ATTACH.

References

http://secunia.com/advisories/50998
http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
http://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html

Vulnerable Configurations

cpe:2.3:a:oracle:supply_chain_products_suite:9.3.1:*:*:*:*:*:*:*
cpe:2.3:a:oracle:supply_chain_products_suite:9.3.1:*:*:*:*:*:*:*

CVSS

Base:	4.0 (as of 11-10-2013 - 03:44)
Impact:
Exploitability:

CWE

NVD-CWE-noinfo

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	LOW	SINGLE

Impact

Confidentiality	Integrity	Availability
PARTIAL	NONE	NONE

cvss-vector via4

AV:N/AC:L/Au:S/C:P/I:N/A:N

refmap via4

confirm	http://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html
mandriva	MDVSA-2013:150
secunia	50998

Last major update

11-10-2013 - 03:44

Published

16-10-2012 - 23:55

Last modified

11-10-2013 - 03:44