製品・ソフトウェアに関する情報
Vulnerability Search
Oracle Siebel CRM の Siebel Engineering - Installer and Deployment における Siebel Approval Manager に関する脆弱性
Title Oracle Siebel CRM の Siebel Engineering - Installer and Deployment における Siebel Approval Manager に関する脆弱性
Summary

Oracle Siebel CRM の Siebel Engineering - Installer and Deployment には、Siebel Approval Manager に関する処理に不備があるため、機密性に影響のある脆弱性が存在します。

Possible impacts リモート認証されたユーザにより、情報を取得される可能性があります。
Solution

ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date Jan. 16, 2018, midnight
Registration Date Feb. 1, 2018, 12:05 p.m.
Last Update Feb. 1, 2018, 12:05 p.m.
CVSS3.0 : 警告
Score 4.3
Vector CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS2.0 : 警告
Score 4
Vector AV:N/AC:L/Au:S/C:P/I:N/A:N
Affected System
オラクル
Siebel 16.0
Siebel 17.0
CVE (情報セキュリティ 共通脆弱性識別子)
CWE (共通脆弱性タイプ一覧)
ベンダー情報
Change Log
No Changed Details Date of change
0 [2018年02月01日]
  掲載		 Feb. 17, 2018, 10:37 a.m.
NVD Vulnerability Information
CVE-2018-2632
Summary

Vulnerability in the Siebel Engineering - Installer and Deployment component of Oracle Siebel CRM (subcomponent: Siebel Approval Manager). Supported versions that are affected are 16.0 and 17.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel Engineering - Installer and Deployment. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Siebel Engineering - Installer and Deployment accessible data. CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).

Publication Date Jan. 18, 2018, 11:29 a.m.
Registration Date March 1, 2021, 7:22 p.m.
Last Update Nov. 21, 2024, 1:04 p.m.
Affected software configurations
Configuration1 or higher or less more than less than
cpe:2.3:a:oracle:siebel_engineering-installer_and_deployment:16.0:*:*:*:*:*:*:*
cpe:2.3:a:oracle:siebel_engineering-installer_and_deployment:17.0:*:*:*:*:*:*:*
Related information, measures and tools
Common Vulnerabilities List