CVE-2011-2318

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 9.2.4.0, 10.0.2.0, 10.3.3.0, 10.3.4.0, and 10.3.5.0 allows local users to affect confidentiality, related to WLS Security.

CVSS v2.0 1.5 LOW

1.5^/10

CVSS v2.0 : LOW

Vector : AV:L/AC:M/Au:S/C:P/I:N/A:N

Exploitability : 2.7 / Impact : 2.9

Access Vector LOCAL

Access Complexity MEDIUM

Authentication SINGLE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
http://osvdb.org/76494
http://www.oracle.com/technetwork/topics/security/cpuoct2011-330135.html	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:oracle:fusion_middleware:9.2.4:::::::*
	cpe:2.3:a:oracle:fusion_middleware:10.0.2:::::::*
	cpe:2.3:a:oracle:fusion_middleware:10.3.3:::::::*
	cpe:2.3:a:oracle:fusion_middleware:10.3.4:::::::*
	cpe:2.3:a:oracle:fusion_middleware:10.3.5:::::::*

History

No history.

Information

Published : 2011-10-18 22:55

Updated : 2024-02-28 11:41

NVD link : CVE-2011-2318

Mitre link : CVE-2011-2318

CVE.ORG link : CVE-2011-2318

JSON object : View

Products Affected

oracle

fusion_middleware

CWE

NVD-CWE-noinfo

{"id": "CVE-2011-2318", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 1.5, "accessVector": "LOCAL", "vectorString": "AV:L/AC:M/Au:S/C:P/I:N/A:N", "authentication": "SINGLE", "integrityImpact": "NONE", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "LOW", "obtainAllPrivilege": false, "exploitabilityScore": 2.7, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2011-10-18T22:55:02.667", "references": [{"url": "http://osvdb.org/76494", "source": "secalert_us@oracle.com"}, {"url": "http://www.oracle.com/technetwork/topics/security/cpuoct2011-330135.html", "tags": ["Vendor Advisory"], "source": "secalert_us@oracle.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 9.2.4.0, 10.0.2.0, 10.3.3.0, 10.3.4.0, and 10.3.5.0 allows local users to affect confidentiality, related to WLS Security."}, {"lang": "es", "value": "Vulnerabilidad no especificada en el componente Oracle WebLogic Server en Oracle Fusion Middleware v9.2.4.0, v10.0.2.0, v10.3.3.0, v10.3.4.0, y v10.3.5.0 permite a usuarios locales afectar a la confidencialidad, relacionado con WLS Security."}], "lastModified": "2012-01-19T05:00:00.000", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:oracle:fusion_middleware:9.2.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A70B39C4-DA43-4635-BF95-6FA9780B4F32"}, {"criteria": "cpe:2.3:a:oracle:fusion_middleware:10.0.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "66F77B48-8DD3-4067-96CF-F7F8A92E03AA"}, {"criteria": "cpe:2.3:a:oracle:fusion_middleware:10.3.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "93EFBC67-F1C0-4256-BB08-17A3BCFE9CE2"}, {"criteria": "cpe:2.3:a:oracle:fusion_middleware:10.3.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E33CE0C3-CD50-4E81-B17E-C71977199F70"}, {"criteria": "cpe:2.3:a:oracle:fusion_middleware:10.3.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DCFB9A54-A10A-4D54-BA6C-C0BC1BC67E45"}], "operator": "OR"}]}], "sourceIdentifier": "secalert_us@oracle.com"}