cnvd - cnvd-2019-34705

cnvd-2019-34705

Vulnerability from cnvd

Title

Oracle Enterprise Manager Products Suite Enterprise Manager Ops Center组件访问控制错误漏洞

Description

Oracle Enterprise Manager Products Suite是美国甲骨文（Oracle）公司的一套企业内部部署管理平台。Enterprise Manager Ops Center是其中的一个企业数据中心监控管理组件。 Oracle Enterprise Manager Products Suite中的Enterprise Manager Ops Center组件12.3.3版本和12.4.0版本的Networking子组件存在安全漏洞。攻击者可利用该漏洞未授权更新、插入或删除数据，影响数据的完整性。

Severity

中

Patch Name

Oracle Enterprise Manager Products Suite Enterprise Manager Ops Center组件访问控制错误漏洞的补丁

Patch Description

Formal description

厂商已发布了漏洞修复程序，请及时关注更新： https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html

Reference

https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html

Impacted products

Name
['Oracle Enterprise Manager Ops Center 12.3.3', 'Oracle Enterprise Manager Ops Center 12.4.0']

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2019-2728",
      "cveUrl": "https://nvd.nist.gov/vuln/detail/CVE-2019-2728"
    }
  },
  "description": "Oracle Enterprise Manager Products Suite\u662f\u7f8e\u56fd\u7532\u9aa8\u6587\uff08Oracle\uff09\u516c\u53f8\u7684\u4e00\u5957\u4f01\u4e1a\u5185\u90e8\u90e8\u7f72\u7ba1\u7406\u5e73\u53f0\u3002Enterprise Manager Ops Center\u662f\u5176\u4e2d\u7684\u4e00\u4e2a\u4f01\u4e1a\u6570\u636e\u4e2d\u5fc3\u76d1\u63a7\u7ba1\u7406\u7ec4\u4ef6\u3002\n\nOracle Enterprise Manager Products Suite\u4e2d\u7684Enterprise Manager Ops Center\u7ec4\u4ef612.3.3\u7248\u672c\u548c12.4.0\u7248\u672c\u7684Networking\u5b50\u7ec4\u4ef6\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u672a\u6388\u6743\u66f4\u65b0\u3001\u63d2\u5165\u6216\u5220\u9664\u6570\u636e\uff0c\u5f71\u54cd\u6570\u636e\u7684\u5b8c\u6574\u6027\u3002",
  "discovererName": "Oracle",
  "formalWay": "\u5382\u5546\u5df2\u53d1\u5e03\u4e86\u6f0f\u6d1e\u4fee\u590d\u7a0b\u5e8f\uff0c\u8bf7\u53ca\u65f6\u5173\u6ce8\u66f4\u65b0\uff1a\r\nhttps://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2019-34705",
  "openTime": "2019-10-11",
  "patchDescription": "Oracle Enterprise Manager Products Suite\u662f\u7f8e\u56fd\u7532\u9aa8\u6587\uff08Oracle\uff09\u516c\u53f8\u7684\u4e00\u5957\u4f01\u4e1a\u5185\u90e8\u90e8\u7f72\u7ba1\u7406\u5e73\u53f0\u3002Enterprise Manager Ops Center\u662f\u5176\u4e2d\u7684\u4e00\u4e2a\u4f01\u4e1a\u6570\u636e\u4e2d\u5fc3\u76d1\u63a7\u7ba1\u7406\u7ec4\u4ef6\u3002\r\n\r\nOracle Enterprise Manager Products Suite\u4e2d\u7684Enterprise Manager Ops Center\u7ec4\u4ef612.3.3\u7248\u672c\u548c12.4.0\u7248\u672c\u7684Networking\u5b50\u7ec4\u4ef6\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u672a\u6388\u6743\u66f4\u65b0\u3001\u63d2\u5165\u6216\u5220\u9664\u6570\u636e\uff0c\u5f71\u54cd\u6570\u636e\u7684\u5b8c\u6574\u6027\u3002 \u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Oracle Enterprise Manager Products Suite Enterprise Manager Ops Center\u7ec4\u4ef6\u8bbf\u95ee\u63a7\u5236\u9519\u8bef\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": [
      "Oracle Enterprise Manager Ops Center 12.3.3",
      "Oracle Enterprise Manager Ops Center 12.4.0"
    ]
  },
  "referenceLink": "https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html",
  "serverity": "\u4e2d",
  "submitTime": "2019-07-17",
  "title": "Oracle Enterprise Manager Products Suite Enterprise Manager Ops Center\u7ec4\u4ef6\u8bbf\u95ee\u63a7\u5236\u9519\u8bef\u6f0f\u6d1e"
}

CVE-2019-2728 (GCVE-0-2019-2728)

Vulnerability from cvelistv5

Published

2019-07-23 22:31

Modified

2024-10-01 16:46

Severity ?

CWE

Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Enterprise Manager Ops Center. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Enterprise Manager Ops Center accessible data.

Summary

Vulnerability in the Enterprise Manager Ops Center component of Oracle Enterprise Manager Products Suite (subcomponent: Networking). Supported versions that are affected are 12.3.3 and 12.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Enterprise Manager Ops Center. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Enterprise Manager Ops Center accessible data. CVSS 3.0 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N).

References

URL

Tags

http://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html

x_refsource_MISC