Signature Detail
Short Name |
HTTP:ORACLE:DEMANTRA-FILEACCESS |
|---|---|
Severity |
Medium |
Recommended |
Yes |
Recommended Action |
Drop |
Category |
HTTP |
Keywords |
Oracle Demantra Demand Management Unauthorized File Access |
Release Date |
2014/08/04 |
Update Number |
2405 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
HTTP: Oracle Demantra Demand Management Unauthorized File Access
This signature detects attempts to exploit a known vulnerability against Oracle Demantra Demand Management. A successful attack can lead to unauthorized file disclosure.
Extended Description
Unspecified vulnerability in the Oracle Demantra Demand Management component in Oracle Supply Chain Products Suite 7.2.0.3 SQL-Server, 7.3.0, 7.3.1, 12.2.0, and 12.2.1 allows remote attackers to affect confidentiality via unknown vectors related to DM Others.
Affected Products
- oracle supply_chain_products_suite 7.2.0.3
- oracle supply_chain_products_suite_sql-server 12.2.0
- oracle supply_chain_products_suite_sql-server 12.2.1
- oracle supply_chain_products_suite_sql-server 7.3.0
- oracle supply_chain_products_suite_sql-server 7.3.1
References
- BugTraq: 64831
- CVE: CVE-2013-5877