Multiple vulnerabilities in Oracle Retail Order Broker



Published: 2021-07-27 | Updated: 2022-09-22
Risk Medium
Patch available YES
Number of vulnerabilities 2
CVE-ID CVE-2020-11987
CVE-2021-22118
CWE-ID CWE-918
CWE-264
Exploitation vector Network
Public exploit N/A
Vulnerable software
Subscribe
Oracle Retail Order Broker
Other software / Other software solutions

Vendor Oracle

Security Bulletin

This security bulletin contains information about 2 vulnerabilities.

1) Server-Side Request Forgery (SSRF)

EUVDB-ID: #VU52501

Risk: Medium

CVSSv3.1:

CVE-ID: CVE-2020-11987

CWE-ID: CWE-918 - Server-Side Request Forgery (SSRF)

Exploit availability: No

Description

The disclosed vulnerability allows a remote attacker to perform SSRF attacks.

The vulnerability exists due to insufficient validation of user-supplied input. A remote attacker can send a specially crafted HTTP request and trick the application to initiate requests to arbitrary systems.

Successful exploitation of this vulnerability may allow a remote attacker gain access to sensitive data, located in the local network or send malicious requests to other servers from the vulnerable system.

Mitigation

Install update from vendor's website.

Vulnerable software versions

Oracle Retail Order Broker: 15.0 - 16.0


CPE2.3 External links

http://www.oracle.com/security-alerts/cpujul2021.html?3249

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

2) Permissions, Privileges, and Access Controls

EUVDB-ID: #VU53672

Risk: Low

CVSSv3.1:

CVE-ID: CVE-2021-22118

CWE-ID: CWE-264 - Permissions, Privileges, and Access Controls

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to application does not properly impose security restrictions in the WebFlux application, which leads to security restrictions bypass and privilege escalation.

Mitigation

Install update from vendor's website.

Vulnerable software versions

Oracle Retail Order Broker: 16.0


CPE2.3 External links

http://www.oracle.com/security-alerts/cpujul2021.html?3249

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?



###SIDEBAR###