Code injection

2023-01-2621:18:00

PRIOn knowledge base

www.prio-n.com

code injection

oracle ldap

attribute enumeration

nvd

6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

27.1%

JSON

Ability to enumerate the Oracle LDAP attributes for the current user by modifying the query used by the application

CPENameOperatorVersion
symantec_identity_governance_and_administrationeq14.3
symantec_identity_governance_and_administrationeq14.4.1
symantec_identity_governance_and_administrationeq14.4.2
symantec_identity_managereq14.4
symantec_identity_managereq14.3

Name	Operator	Version
symantec_identity_governance_and_administration	eq	14.3
symantec_identity_governance_and_administration	eq	14.4.1
symantec_identity_governance_and_administration	eq	14.4.2
symantec_identity_manager	eq	14.4
symantec_identity_manager	eq	14.3

References

support.broadcom.com/external/content/SecurityAdvisories/0/21174