CVE-2013-0360

Unspecified vulnerability in the Application Performance Management (APM) component in Oracle Enterprise Manager Grid Control 6.5, 11.1, and 12.1.0.2 allows remote attackers to affect integrity via unknown vectors related to Business Transaction Management, a different vulnerability than CVE-2013-0396.

CVSS v2.0 5.0 MEDIUM

5.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:N/C:N/I:P/A:N

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

References

Link	Resource
http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:oracle:enterprise_manager_grid_control:6.5:::::::*
	cpe:2.3:a:oracle:enterprise_manager_grid_control:11.1:::::::*
	cpe:2.3:a:oracle:enterprise_manager_grid_control:12.1.0.2:::::::*

History

No history.

Information

Published : 2013-01-17 01:55

Updated : 2013-10-11 03:48

NVD link : CVE-2013-0360

Mitre link : CVE-2013-0360

CVE.ORG link : CVE-2013-0360

JSON object : View

Products Affected

oracle

enterprise_manager_grid_control

CWE

NVD-CWE-noinfo

{"id": "CVE-2013-0360", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2013-01-17T01:55:03.670", "references": [{"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:150", "source": "secalert_us@oracle.com"}, {"url": "http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html", "tags": ["Vendor Advisory"], "source": "secalert_us@oracle.com"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "Unspecified vulnerability in the Application Performance Management (APM) component in Oracle Enterprise Manager Grid Control 6.5, 11.1, and 12.1.0.2 allows remote attackers to affect integrity via unknown vectors related to Business Transaction Management, a different vulnerability than CVE-2013-0396."}, {"lang": "es", "value": "Una vulnerabilidad no especificada en la gesti\u00f3n del componente Application Performance Management de Oracle Enterprise Manager Grid Control v6.5, v11.1 y v12.1.0.2 permite a atacantes remotos afectar la integridad a trav\u00e9s de vectores desconocidos relacionados con 'Business Transaction Management'. Se trata de una vulnerabilidad diferente a CVE-2013-0396a."}], "lastModified": "2013-10-11T03:48:41.263", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:oracle:enterprise_manager_grid_control:6.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A6FAAE14-79A3-4E25-A62E-70F4BC755160"}, {"criteria": "cpe:2.3:a:oracle:enterprise_manager_grid_control:11.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "65D75D8C-AA38-47F9-8463-71E2A23010A4"}, {"criteria": "cpe:2.3:a:oracle:enterprise_manager_grid_control:12.1.0.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7E09416E-7860-4D93-8C45-019D89B6E8EA"}], "operator": "OR"}]}], "sourceIdentifier": "secalert_us@oracle.com"}