Multiple vulnerabilities in Oracle StorageTek ACSLS



Published: 2022-04-25 | Updated: 2022-07-14
Risk High
Patch available YES
Number of vulnerabilities 6
CVE-ID CVE-2020-9488
CVE-2020-11022
CVE-2019-3740
CVE-2020-5421
CVE-2020-11979
CVE-2021-2351
CWE-ID CWE-295
CWE-79
CWE-20
CWE-264
Exploitation vector Network
Public exploit Public exploit code for vulnerability #2 is available.
Public exploit code for vulnerability #4 is available.
Vulnerable software
Subscribe 		Oracle StorageTek ACSLS
Server applications / Other server solutions

Vendor Oracle

Security Bulletin

This security bulletin contains information about 6 vulnerabilities.

1) Improper Certificate Validation

EUVDB-ID: #VU27487

Risk: Low

CVSSv3.1:

CVE-ID: CVE-2020-9488

CWE-ID:

Exploit availability:

Description

The vulnerability allows a remote attacker to perform man-in-the-middle attack.

The vulnerability exists due to the Apache Log4j SMTP appender does not validate SSL certificates. A remote attacker can perform a MitM attack, intercept and decrypt network traffic.

Mitigation

Install update from vendor's website.

Vulnerable software versions

Oracle StorageTek ACSLS: 8.5.1

Fixed software versions

CPE2.3 External links

http://www.oracle.com/security-alerts/cpuapr2022.html?952694


Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

2) Cross-site scripting

EUVDB-ID: #VU27052

Risk: Low

CVSSv3.1:

CVE-ID: CVE-2020-11022

CWE-ID:

Exploit availability:

Description

The disclosed vulnerability allows a remote attacker to perform cross-site scripting (XSS) attacks.

The vulnerability exists due to insufficient sanitization of user-supplied data in the regex operation in "jQuery.htmlPrefilter". A remote attacker can pass specially crafted data to the application that uses .html()</code>, <code>.append() or similar methods for it and execute arbitrary JavaScript code in user's browser in context of vulnerable website.

Successful exploitation of this vulnerability may allow a remote attacker to steal potentially sensitive information, change appearance of the web page, perform phishing and drive-by-download attacks.

Mitigation

Install update from vendor's website.

Vulnerable software versions

Oracle StorageTek ACSLS: 8.5.1

Fixed software versions

CPE2.3 External links

http://www.oracle.com/security-alerts/cpuapr2022.html?952694


Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

3) Improper input validation

EUVDB-ID: #VU48048

Risk: Medium

CVSSv3.1:

CVE-ID: CVE-2019-3740

CWE-ID:

Exploit availability:

Description

The vulnerability allows a remote non-authenticated attacker to gain access to sensitive information.

The vulnerability exists due to improper input validation within the Comp Management and Life Cycle Management (RSA BSAFE Crypto-J) component in Application Performance Management (APM). A remote non-authenticated attacker can exploit this vulnerability to gain access to sensitive information.

Mitigation

Install update from vendor's website.

Vulnerable software versions

Oracle StorageTek ACSLS: 8.5.1

Fixed software versions

CPE2.3 External links

http://www.oracle.com/security-alerts/cpuapr2022.html?952694


Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

4) Improper input validation

EUVDB-ID: #VU49739

Risk: Medium

CVSSv3.1:

CVE-ID: CVE-2020-5421

CWE-ID:

Exploit availability:

Description

The vulnerability allows a remote authenticated user to read and manipulate data.

The vulnerability exists due to improper input validation within the Core (Spring Framework) component in Oracle Communications Session Report Manager. A remote authenticated user can exploit this vulnerability to read and manipulate data.

Mitigation

Install update from vendor's website.

Vulnerable software versions

Oracle StorageTek ACSLS: 8.5.1

Fixed software versions

CPE2.3 External links

http://www.oracle.com/security-alerts/cpuapr2022.html?952694


Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

5) Permissions, Privileges, and Access Controls

EUVDB-ID: #VU47428

Risk: Low

CVSSv3.1:

CVE-ID: CVE-2020-11979

CWE-ID:

Exploit availability:

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to incorrect patch for vulnerability #VU27924 (CVE-2020-1945). Apache Ant 1.10.8 changed the permissions of temporary files it created so that only the current user was allowed to access them. Unfortunately the fixcrlf task deleted the temporary file and created a new one without said protection, effectively nullifying the effort. This would still allow an attacker to inject modified source files into the build process.

Mitigation

Install update from vendor's website.

Vulnerable software versions

Oracle StorageTek ACSLS: 8.5.1

Fixed software versions

CPE2.3 External links

http://www.oracle.com/security-alerts/cpuapr2022.html?952694


Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

6) Improper input validation

EUVDB-ID: #VU55044

Risk: High

CVSSv3.1:

CVE-ID: CVE-2021-2351

CWE-ID:

Exploit availability:

Description

The vulnerability allows a remote non-authenticated attacker to execute arbitrary code.

The vulnerability exists due to improper input validation within the Advanced Networking Option in Oracle Database Server. A remote non-authenticated attacker can exploit this vulnerability to execute arbitrary code.

Mitigation

Install update from vendor's website.

Vulnerable software versions

Oracle StorageTek ACSLS: 8.5.1

Fixed software versions

CPE2.3 External links

http://www.oracle.com/security-alerts/cpuapr2022.html?952694


Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?



###SIDEBAR###