Lucene search

K
prionPRIOn knowledge basePRION:CVE-2007-2112
HistoryApr 18, 2007 - 6:19 p.m.

Authentication flaw

2007-04-1818:19:00
PRIOn knowledge base
www.prio-n.com
2

6.3 Medium

AI Score

Confidence

Low

6 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:S/C:P/I:P/A:P

0.021 Low

EPSS

Percentile

89.1%

Unspecified vulnerability in the Authentication component for Oracle Database 10.1.0.5 and 10.2.0.3 has unknown impact and attack vectors, aka DB05. NOTE: as of 20070424, Oracle has not disputed reliable claims that this issue allows remote authenticated users to bypass the AUTH_ALTER_SESSION security policies via a logon trigger (“AFTER LOGON ON DATABASE” trigger directive), a related issue to CVE-2006-0547.

6.3 Medium

AI Score

Confidence

Low

6 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:S/C:P/I:P/A:P

0.021 Low

EPSS

Percentile

89.1%