CVE-2011-3506 - Unspecified vulnerability in the Oracle OpenSSO component in Oracle Sun Products Suite 7.1 and 8.0 a

CVE-2011-3506

Summary

Unspecified vulnerability in the Oracle OpenSSO component in Oracle Sun Products Suite 7.1 and 8.0 allows remote attackers to affect integrity via unknown vectors related to Authentication.

References

http://rhn.redhat.com/errata/RHSA-2012-1232.html
http://secunia.com/advisories/46527
http://secunia.com/advisories/46528
http://secunia.com/advisories/50084
http://www.oracle.com/technetwork/topics/security/cpuoct2011-330135.html

Vulnerable Configurations

cpe:2.3:a:oracle:sun_products_suite:7.1:*:*:*:*:*:*:*
cpe:2.3:a:oracle:sun_products_suite:7.1:*:*:*:*:*:*:*
cpe:2.3:a:oracle:sun_products_suite:8.0:*:*:*:*:*:*:*
cpe:2.3:a:oracle:sun_products_suite:8.0:*:*:*:*:*:*:*

CVSS

Base:	4.3 (as of 27-11-2012 - 04:34)
Impact:
Exploitability:

CWE

NVD-CWE-noinfo

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	MEDIUM	NONE

Impact

Confidentiality	Integrity	Availability
NONE	PARTIAL	NONE

cvss-vector via4

AV:N/AC:M/Au:N/C:N/I:P/A:N

redhat via4

advisories

rhsa

id	RHSA-2012:1232

refmap via4

confirm	http://www.oracle.com/technetwork/topics/security/cpuoct2011-330135.html
secunia	46527 46528 50084

Last major update

27-11-2012 - 04:34

Published

18-10-2011 - 22:55

Last modified

27-11-2012 - 04:34