CVE-2018-2879

🗓️ 19 Apr 2018 02:00:00Reported by oracleType

Vulnerability in Oracle Fusion Middleware's Oracle Access Manager allows unauthenticated network access compromising the syste

Reporter	Title	Published	Views	Family All 11
0day.today	Oracle Access Manager 11.1.2.3.0 / 12.2.1.3.0 Authentication Bypass Vulnerability	4 May 201800:00	–	zdt
Circl	CVE-2018-2879	4 May 201810:03	–	circl
CNVD	Oracle Access Manager Remote Vulnerability (CNVD-2018-09095)	23 Apr 201800:00	–	cnvd
CVE	CVE-2018-2879	19 Apr 201802:00	–	cve
Hacker One	U.S. Dept Of Defense: [HTAF4-213] [Pre-submission] CVE-2018-2879 (padding oracle attack in the Oracle Access Manager) at https://█████████	3 Nov 201904:23	–	hackerone
NVD	CVE-2018-2879	19 Apr 201802:29	–	nvd
Oracle	Oracle Critical Patch Update - April 2018	17 Apr 201800:00	–	oracle
Tenable Nessus	Oracle Access Manager Multiple Vulnerabilities (Apr 2018 CPU)	11 May 201800:00	–	nessus
OSV	CVE-2018-2879	19 Apr 201802:29	–	osv
Prion	Design/Logic Flaw	19 Apr 201802:29	–	prion

[
  {
    "product": "Access Manager",
    "vendor": "Oracle Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "11.1.2.3.0"
      },
      {
        "status": "affected",
        "version": "12.2.1.3.0"
      }
    ]
  }
]

Source	Link
sec-consult	www.sec-consult.com/en/blog/2018/05/oracle-access-managers-identity-crisis/
github	www.github.com/MostafaSoliman/Oracle-OAM-Padding-Oracle-CVE-2018-2879-Exploit
oracle	www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html
securitytracker	www.securitytracker.com/id/1040695
seclists	www.seclists.org/bugtraq/2019/Apr/27
securityfocus	www.securityfocus.com/bid/103788
seclists	www.seclists.org/fulldisclosure/2019/Apr/28
packetstormsecurity	www.packetstormsecurity.com/files/152551/OAMbuster-Multi-Threaded-CVE-2018-2879-Scanner.html

19 Apr 2019 07:06Current

7.9High risk

Vulners AI Score7.9

EPSS0.44453