CVE-2010-4432

Unspecified vulnerability in the Oracle Transportation Manager component in Oracle Supply Chain Products Suite 5.5.06, 6.0, 6.1, and 6.2 allows remote authenticated users to affect confidentiality via unknown vectors related to UI Infrastructure.

CVSS v2.0 3.5 LOW

3.5^/10

CVSS v2.0 : LOW

Vector : AV:N/AC:M/Au:S/C:P/I:N/A:N

Exploitability : 6.8 / Impact : 2.9

Access Vector NETWORK

Access Complexity MEDIUM

Authentication SINGLE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html	Vendor Advisory
http://www.vupen.com/english/advisories/2011/0146
http://www.securityfocus.com/bid/45875
http://secunia.com/advisories/42993
http://osvdb.org/70566
https://exchange.xforce.ibmcloud.com/vulnerabilities/64784

Advertisement

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:oracle:supply_chain_products_suite:6.0:::::::*
	cpe:2.3:a:oracle:supply_chain_products_suite:6.1:::::::*
	cpe:2.3:a:oracle:supply_chain_products_suite:6.2:::::::*
	cpe:2.3:a:oracle:supply_chain_products_suite:5.5.06:::::::*

Information

Published : 2011-01-19 09:00

Updated : 2017-08-16 18:33

NVD link : CVE-2010-4432

Mitre link : CVE-2010-4432

JSON object : View

CWE

NVD-CWE-noinfo

Advertisement

Products Affected

oracle

supply_chain_products_suite

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html", "name": "http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html", "tags": ["Vendor Advisory"], "refsource": "CONFIRM"}, {"url": "http://www.vupen.com/english/advisories/2011/0146", "name": "ADV-2011-0146", "tags": [], "refsource": "VUPEN"}, {"url": "http://www.securityfocus.com/bid/45875", "name": "45875", "tags": [], "refsource": "BID"}, {"url": "http://secunia.com/advisories/42993", "name": "42993", "tags": [], "refsource": "SECUNIA"}, {"url": "http://osvdb.org/70566", "name": "70566", "tags": [], "refsource": "OSVDB"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/64784", "name": "oracle-transportation-ui-info-disclosure(64784)", "tags": [], "refsource": "XF"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "Unspecified vulnerability in the Oracle Transportation Manager component in Oracle Supply Chain Products Suite 5.5.06, 6.0, 6.1, and 6.2 allows remote authenticated users to affect confidentiality via unknown vectors related to UI Infrastructure."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2010-4432", "ASSIGNER": "secalert_us@oracle.com"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 3.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:S/C:P/I:N/A:N", "authentication": "SINGLE", "integrityImpact": "NONE", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "severity": "LOW", "impactScore": 2.9, "obtainAllPrivilege": false, "exploitabilityScore": 6.8, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}}, "publishedDate": "2011-01-19T17:00Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:oracle:supply_chain_products_suite:6.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:oracle:supply_chain_products_suite:6.1:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:oracle:supply_chain_products_suite:6.2:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:oracle:supply_chain_products_suite:5.5.06:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2017-08-17T01:33Z"}