CVE-2016-0438 - Unspecified vulnerability in the Oracle Retail Point-of-Service component in Oracle Retail Applicati

CVE-2016-0438

Summary

Unspecified vulnerability in the Oracle Retail Point-of-Service component in Oracle Retail Applications 13.4, 14.0, and 14.1 allows local users to affect confidentiality via vectors related to Mobile POS, a different vulnerability than CVE-2016-0434, CVE-2016-0436, and CVE-2016-0437.

References

Vulnerable Configurations

cpe:2.3:a:oracle:retail_applications:13.4:*:*:*:*:*:*:*
cpe:2.3:a:oracle:retail_applications:13.4:*:*:*:*:*:*:*
cpe:2.3:a:oracle:retail_applications:14.0:*:*:*:*:*:*:*
cpe:2.3:a:oracle:retail_applications:14.0:*:*:*:*:*:*:*
cpe:2.3:a:oracle:retail_applications:14.1:*:*:*:*:*:*:*
cpe:2.3:a:oracle:retail_applications:14.1:*:*:*:*:*:*:*

CVSS

Base:	1.9 (as of 08-06-2016 - 15:09)
Impact:
Exploitability:

CWE

NVD-CWE-noinfo

CAPEC

Access

Vector	Complexity	Authentication
LOCAL	MEDIUM	NONE

Impact

Confidentiality	Integrity	Availability
PARTIAL	NONE	NONE

cvss-vector via4

AV:L/AC:M/Au:N/C:P/I:N/A:N

refmap via4

confirm	http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html
sectrack	1034718

Last major update

08-06-2016 - 15:09

Published

21-01-2016 - 02:59

Last modified

08-06-2016 - 15:09