VDB
BDU%3A2021-06299
BDU%3A2021-06299
PUBLISHED
CVSS 5.099999904632568 MEDIUM
Уязвимость компонента Advanced Networking Option системы управления базами данных Oracle Database Server, позволяющая нарушителю реализовать атаку типа «человек посередине» и получить полный контроль над системой
Risk Scores
CVSS 2.0
5.099999904632568
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Oracle Corp., IBM Corp. | Instantis EnterpriseTrack, Database Server, Retail Store Inventory Management, Communications MetaSolv Solution, Communications Application Session Controller, Oracle Communications Session Report Manager, Oracle Communications Session Route Manager, Primavera Gateway, Oracle Real User Experience Insight, IBM Emptoris Contract Management, IBM Emptoris Strategic Supply Management Platform |
Timeline
- Dec 20, 2021 CVE Published
- Aug 23, 2022 CVE Updated
References
- http://packetstormsecurity.com/files/165255/Oracle-Database-Protection-Mechanism-Bypass.html url
- http://packetstormsecurity.com/files/165258/Oracle-Database-Weak-NNE-Integrity-Key-Derivation.html url
- http://seclists.org/fulldisclosure/2021/Dec/19 url
- http://seclists.org/fulldisclosure/2021/Dec/20 url
- https://www.oracle.com/security-alerts/cpujul2021.html url
- https://nvd.nist.gov/vuln/detail/CVE-2021-2351 url
- https://www.cybersecurity-help.cz/vdb/SB2021072053 url
- https://www.ibm.com/support/pages/security-bulletin-oracle-database-server-vulnerability-affects-ibm-emptoris-contract-management-cve-2021-2351 url
- https://www.ibm.com/support/pages/node/6507595 url
- https://www.oracle.com/security-alerts/cpuoct2021.html advisory
- https://access.redhat.com/security/cve/cve-2021-45046 advisory