CVE-2014-0400

Unspecified vulnerability in the Oracle Internet Directory component in Oracle Fusion Middleware 11.1.1.6 and 11.1.1.7 allows remote authenticated users to affect confidentiality via vectors related to OID LDAP server.

CVSS v2.0 6.3 MEDIUM

6.3^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:M/Au:S/C:C/I:N/A:N

Exploitability : 6.8 / Impact : 6.9

Access Vector NETWORK

Access Complexity MEDIUM

Authentication SINGLE

Confidentiality Impact COMPLETE

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
http://osvdb.org/102112
http://secunia.com/advisories/56460
http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html	Vendor Advisory
http://www.securityfocus.com/bid/64758
http://www.securityfocus.com/bid/64822
http://www.securitytracker.com/id/1029618

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:oracle:fusion_middleware:11.1.1.6.0:::::::*
	cpe:2.3:a:oracle:fusion_middleware:11.1.1.7.0:::::::*

History

No history.

Information

Published : 2014-01-15 16:08

Updated : 2014-02-07 04:51

NVD link : CVE-2014-0400

Mitre link : CVE-2014-0400

CVE.ORG link : CVE-2014-0400

JSON object : View

Products Affected

oracle

fusion_middleware

CWE

NVD-CWE-noinfo

{"id": "CVE-2014-0400", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:S/C:C/I:N/A:N", "authentication": "SINGLE", "integrityImpact": "NONE", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 6.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 6.8, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2014-01-15T16:08:09.673", "references": [{"url": "http://osvdb.org/102112", "source": "secalert_us@oracle.com"}, {"url": "http://secunia.com/advisories/56460", "source": "secalert_us@oracle.com"}, {"url": "http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html", "tags": ["Vendor Advisory"], "source": "secalert_us@oracle.com"}, {"url": "http://www.securityfocus.com/bid/64758", "source": "secalert_us@oracle.com"}, {"url": "http://www.securityfocus.com/bid/64822", "source": "secalert_us@oracle.com"}, {"url": "http://www.securitytracker.com/id/1029618", "source": "secalert_us@oracle.com"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "Unspecified vulnerability in the Oracle Internet Directory component in Oracle Fusion Middleware 11.1.1.6 and 11.1.1.7 allows remote authenticated users to affect confidentiality via vectors related to OID LDAP server."}, {"lang": "es", "value": "Vulnerabilidad no especificada en el componente Oracle Internet Directory de Oracle Fusion Middleware 11.1.1.6 y 11.1.1.7 permite a usuarios remotos autenticados afectar la confidencialidad a trav\u00e9s de vectores relacionados con OID LDAP server."}], "lastModified": "2014-02-07T04:51:43.487", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:oracle:fusion_middleware:11.1.1.6.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6935E726-6AA6-468F-AAEB-BC679FD5CFFC"}, {"criteria": "cpe:2.3:a:oracle:fusion_middleware:11.1.1.7.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E8934DB1-B2A1-4C3B-B000-78826FC45C7C"}], "operator": "OR"}]}], "sourceIdentifier": "secalert_us@oracle.com"}