Oracle Identity Manager Default Account Local Check (CVE-2017-10151)

The remote host is missing a security update for Oracle Identity Manager. It, therefore, has a default account enabled that allows an unauthenticated, remote attacker to execute arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...

Highly Critical Flaw (CVSS Score 10) Lets Hackers Hijack Oracle Identity Manager

A highly critical vulnerability has been discovered in Oracle's enterprise identity management system that can be easily exploited by remote, unauthenticated attackers to take full control over the affected systems. The critical vulnerability tracked as CVE-2017-10151, has been assigned the highe...

CVE-2017-10151

CVE-2017-10151 affects Oracle Identity Manager (OIM) within Oracle Fusion Middleware. Affected OIM subcomponent: Default Account; versions 11.1.1.7, 11.1.2.3, and 12.2.1.3 are vulnerable. Root cause cited across sources is an authentication weakness/default account that can be exploited remotely ...