SB2011011903 - Improper access control in Oracle Fusion Middleware
Published: January 19, 2011 Updated: October 4, 2022
Security Bulletin ID
SB2011011903
Severity
High
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Remote access
Highest impact
Code execution
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Improper access control (CVE-ID: CVE-2010-3591)
The vulnerability allows a remote attacker to gain unauthorized access to otherwise restricted functionality.
The vulnerability exists due to improper access restrictions in the Oracle Document Capture component. A remote attacker can bypass implemented security restrictions and overwrite or delete arbitrary files on the system.
Remediation
Install update from vendor's website.
References
- http://dsecrg.com/pages/vul/show.php?id=305
- http://secunia.com/advisories/42976
- http://www.exploit-db.com/exploits/16055
- http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html
- http://www.securityfocus.com/archive/1/515959/100/0/threaded
- http://www.securityfocus.com/bid/45851
- http://www.securitytracker.com/id?1024981
- http://www.vupen.com/english/advisories/2011/0143
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64768