CVE-2018-16957

The Oracle WebCenter Interaction 10.3.3 search service queryd.exe binary is compiled with the i1g2s3c4 hardcoded password. Authentication to the Oracle WCI search service uses this hardcoded password and cannot be customised by customers. An adversary able to access this service over a network could perform search queries to extract large quantities of sensitive information from the WCI installation. NOTE: this CVE is assigned by MITRE and isn't validated by Oracle because Oracle WebCenter Interaction Portal is out of support.

CVSS v3 9.8 CRITICAL
CVSS v2.0 10.0 HIGH

9.8^/10

CVSS v3 : CRITICAL

Vector : AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

10.0^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 10.0 / Impact : 10.0

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://www.securityfocus.com/bid/105350	Third Party Advisory VDB Entry
https://seclists.org/fulldisclosure/2018/Sep/22	Mailing List Third Party Advisory
http://www.securityfocus.com/bid/105350	Third Party Advisory VDB Entry
https://seclists.org/fulldisclosure/2018/Sep/22	Mailing List Third Party Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:oracle:webcenter_interaction:10.3.3:*:*:*:*:*:*:*

History

21 Nov 2024, 03:53

Type	Values Removed	Values Added
References	~~() http://www.securityfocus.com/bid/105350 - Third Party Advisory, VDB Entry~~	() http://www.securityfocus.com/bid/105350 - Third Party Advisory, VDB Entry
References	~~() https://seclists.org/fulldisclosure/2018/Sep/22 - Mailing List, Third Party Advisory~~	() https://seclists.org/fulldisclosure/2018/Sep/22 - Mailing List, Third Party Advisory

Information

Published : 2018-09-18 02:29

Updated : 2024-11-21 03:53

NVD link : CVE-2018-16957

Mitre link : CVE-2018-16957

CVE.ORG link : CVE-2018-16957

JSON object : View

Products Affected

oracle

webcenter_interaction

CWE

CWE-798

Use of Hard-coded Credentials

{"id": "CVE-2018-16957", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 10.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}]}, "published": "2018-09-18T02:29:00.950", "references": [{"url": "http://www.securityfocus.com/bid/105350", "tags": ["Third Party Advisory", "VDB Entry"], "source": "cve@mitre.org"}, {"url": "https://seclists.org/fulldisclosure/2018/Sep/22", "tags": ["Mailing List", "Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/105350", "tags": ["Third Party Advisory", "VDB Entry"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://seclists.org/fulldisclosure/2018/Sep/22", "tags": ["Mailing List", "Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-798"}]}], "descriptions": [{"lang": "en", "value": "The Oracle WebCenter Interaction 10.3.3 search service queryd.exe binary is compiled with the i1g2s3c4 hardcoded password. Authentication to the Oracle WCI search service uses this hardcoded password and cannot be customised by customers. An adversary able to access this service over a network could perform search queries to extract large quantities of sensitive information from the WCI installation. NOTE: this CVE is assigned by MITRE and isn't validated by Oracle because Oracle WebCenter Interaction Portal is out of support."}, {"lang": "es", "value": "El binario del servicio de b\u00fasqueda queryd.exe de Oracle WebCenter Interaction 10.3.3 se compila con la contrase\u00f1a embebida i1g2s3c4. La autenticaci\u00f3n al servicio de b\u00fasqueda de Oracle WCI emplea esta contrase\u00f1a embebida y no puede ser personalizable por los clientes. Un adversario que pueda acceder a este servicio a trav\u00e9s de la red podr\u00eda realizar consultas de b\u00fasqueda para extraer grandes cantidades de informaci\u00f3n sensible desde la instalaci\u00f3n de WCI. NOTA: este CVE ha sido asignado por MITRE y no est\u00e1 validado por Oracle debido a que Oracle WebCenter Interaction Portal ya no tiene soporte."}], "lastModified": "2024-11-21T03:53:35.537", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:oracle:webcenter_interaction:10.3.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "09AF34F7-194B-4114-AE1D-3CE10946B074"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}