Main
Vulnerability Database
Exploits
ID:2349 - Exploit for Security restrictions bypass in Identity Manager - CVE-2017-10151
ID:2349 - Exploit for Security restrictions bypass in Identity Manager - CVE-2017-10151
Published: April 7, 2020
Vulnerability identifier: #VU9014
Vulnerability risk: High
CVE-ID: CVE-2017-10151
CWE-ID: CWE-284
Exploitation vector: Remote access
Vulnerable software:
Identity Manager
Identity Manager
Link to public exploit:
Vulnerability description
The vulnerability allows a remote attacker to bypass security restrictions on the target system.
The weakness exists due to an error in the Oracle Identity Manager component of Oracle Fusion Middleware (subcomponent: Default Account). A remote attacker with network access via HTTP can compromise Oracle Identity Manager.
Successful exploitation of the vulnerability may result in takeover of Oracle Identity Manager.
The weakness exists due to an error in the Oracle Identity Manager component of Oracle Fusion Middleware (subcomponent: Default Account). A remote attacker with network access via HTTP can compromise Oracle Identity Manager.
Successful exploitation of the vulnerability may result in takeover of Oracle Identity Manager.
Remediation
Install update from vendor's website.