CVE-2014-2404

{"id": "CVE-2014-2404", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:S/C:P/I:N/A:N", "authentication": "SINGLE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2014-04-16T01:55:10.680", "references": [{"url": "http://packetstormsecurity.com/files/127047/Oracle-Access-Manager-Information-Disclosure.html", "source": "secalert_us@oracle.com"}, {"url": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html", "tags": ["Vendor Advisory"], "source": "secalert_us@oracle.com"}, {"url": "http://www.securityfocus.com/bid/66862", "source": "secalert_us@oracle.com"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 10.1.4.3, 11.1.1.3.0, 11.1.1.5.0, 11.1.1.7.0, 11.1.2.0.0, 11.1.2.1.0, and 11.1.2.2.0 allows remote authenticated users to affect confidentiality via unknown vectors related to WebGate."}, {"lang": "es", "value": "Vulnerabilidad no especificada en el componente Oracle Access Manager en Oracle Fusion Middleware 10.1.4.3, 11.1.1.3.0, 11.1.1.5.0, 11.1.1.7.0, 11.1.2.0.0, 11.1.2.1.0, y 11.1.2.2.0 permite a usuarios remotos autenticados afectar la confidencialidad a trav\u00e9s de vectores desconocidos relacionados con WebGate."}], "lastModified": "2014-06-21T04:40:43.707", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:oracle:fusion_middleware:10.1.4.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "410C2981-D85A-4EF2-A335-0FB413DC74A2"}, {"criteria": "cpe:2.3:a:oracle:fusion_middleware:11.1.1.3.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E9A80B05-7A5E-48A5-B7D9-BB48EE1FC5E2"}, {"criteria": "cpe:2.3:a:oracle:fusion_middleware:11.1.1.5.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8EA2051D-4D42-49DE-BECA-E28C5EA0C030"}, {"criteria": "cpe:2.3:a:oracle:fusion_middleware:11.1.1.7.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E8934DB1-B2A1-4C3B-B000-78826FC45C7C"}, {"criteria": "cpe:2.3:a:oracle:fusion_middleware:11.1.2.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "81E45EA8-13AA-4219-A108-00472932CF17"}, {"criteria": "cpe:2.3:a:oracle:fusion_middleware:11.1.2.1.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D5D8E14F-4F2F-40ED-8ACE-D92FC2CE937B"}, {"criteria": "cpe:2.3:a:oracle:fusion_middleware:11.1.2.2.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "936C1F14-2B50-41F8-AB48-6FCCC189B2D2"}], "operator": "OR"}]}], "evaluatorComment": "Per: http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html\n\n\"Please refer to My Oracle Support Note 1643382.1 for instructions on how to address this issue.\"", "sourceIdentifier": "secalert_us@oracle.com"}