IT 计算机信息网络安全技术

Web Technology:

白帽子计算机安全:

Exploit Title: Oracle Manager WebGate Subcomponent Unspecified Remote Information Disclosure

Product: Access Manager component in Oracle Fusion Middleware

Vendor: Oracle

Vulnerable Versions: 10.1.4.3, 11.1.1.3.0, 11.1.1.5.0, 11.1.1.7.0, 11.1.2.0.0, 11.1.2.1.0, and 11.1.2.2.0

Advisory Publication: Apr 15, 2014

Latest Update: Apr 15, 2014

Vulnerability Type: Information Exposure [CWE-200]

CVE Reference: CVE-2014-2404

Risk Level: Medium

CVSS v2 Base Score: 4.0 (AV:N/AC:L/Au:S/C:P/I:N/A:N) (legend)

Solution Status: Fixed by Vendor

Credit: Wang Jing [SPMS, Nanyang Technological University, Singapore]

http://www.osvdb.org/creditees/12822-wang-jing