CVE-2014-2452 - Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.1.

CVE-2014-2452

Summary

Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.1.5 allows remote authenticated users to affect availability via unknown vectors related to Webserver Plugin.

References

http://packetstormsecurity.com/files/127047/Oracle-Access-Manager-Information-Disclosure.html
http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html
http://www.securityfocus.com/bid/66865

Vulnerable Configurations

cpe:2.3:a:oracle:fusion_middleware:11.1.1.5.0:*:*:*:*:*:*:*
cpe:2.3:a:oracle:fusion_middleware:11.1.1.5.0:*:*:*:*:*:*:*

CVSS

Base:	4.0 (as of 21-06-2014 - 04:40)
Impact:
Exploitability:

CWE

NVD-CWE-noinfo

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	LOW	SINGLE

Impact

Confidentiality	Integrity	Availability
NONE	NONE	PARTIAL

cvss-vector via4

AV:N/AC:L/Au:S/C:N/I:N/A:P

refmap via4

bid	66865
confirm	http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html
misc	http://packetstormsecurity.com/files/127047/Oracle-Access-Manager-Information-Disclosure.html

Last major update

21-06-2014 - 04:40

Published

16-04-2014 - 02:55

Last modified

21-06-2014 - 04:40