CVE-2011-3506
published 2011-10-18CVE-2011-3506: Unspecified vulnerability in the Oracle OpenSSO component in Oracle Sun Products Suite 7.1 and 8.0 allows remote attackers to affect integrity via unknown…
PriorityP424medium4.3CVSS 2.0
AVNACMAuNCNIPAN
EPSS
1.89%
77.1th percentile
Unspecified vulnerability in the Oracle OpenSSO component in Oracle Sun Products Suite 7.1 and 8.0 allows remote attackers to affect integrity via unknown vectors related to Authentication.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| oracle | sun_products_suite | — | — |
| oracle | sun_products_suite | — | — |
CVSS provenance
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
vendor_redhat4.3MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
OpenSSO: Unspecified vulnerability allows remote attackers to affect integrity via unknown vectors
vendor_redhat·2012-01-18·CVSS 4.3
CVE-2012-0079 [MEDIUM] OpenSSO: Unspecified vulnerability allows remote attackers to affect integrity via unknown vectors
OpenSSO: Unspecified vulnerability allows remote attackers to affect integrity via unknown vectors
Unspecified vulnerability in Oracle OpenSSO 7.1 and 8.0 allows remote attackers to affect integrity via unknown vectors related to Administration.
Statement: Oracle OpenSSO is provided as part of the opensso quickstart example application shipped with JBoss Enterprise SOA Platform 5. The CVE-2011-3506, CVE-2011-3517, and CVE-2012-0079 flaws are not exposed unless the opensso quickstart example application is deployed, or you have created and deployed a custom application that is packaged with a copy of Oracle OpenSSO as provided by the opensso quickstart.
The opensso quickstart has been removed in JBoss Enterprise SOA Platform 5.3.0 to address these flaws. Users interested in continuing to
Red Hat
OpenSSO: unspecified vulnerability in the authentication component
vendor_redhat·2011-10-18·CVSS 4.3
CVE-2011-3506 [MEDIUM] OpenSSO: unspecified vulnerability in the authentication component
OpenSSO: unspecified vulnerability in the authentication component
Unspecified vulnerability in the Oracle OpenSSO component in Oracle Sun Products Suite 7.1 and 8.0 allows remote attackers to affect integrity via unknown vectors related to Authentication.
Statement: Oracle OpenSSO is provided as part of the opensso quickstart example application shipped with JBoss Enterprise SOA Platform 5. The CVE-2011-3506, CVE-2011-3517, and CVE-2012-0079 flaws are not exposed unless the opensso quickstart example application is deployed, or you have created and deployed a custom application that is packaged with a copy of Oracle OpenSSO as provided by the opensso quickstart.
The opensso quickstart has been removed in JBoss Enterprise SOA Platform 5.3.0 to address these flaws. Users interested in con
Red Hat
OpenSSO: unspecified vulnerability in the authentication component
vendor_redhat·2011-10-18·CVSS 4.3
CVE-2011-3517 [MEDIUM] OpenSSO: unspecified vulnerability in the authentication component
OpenSSO: unspecified vulnerability in the authentication component
Unspecified vulnerability in the Oracle OpenSSO component in Oracle Sun Products Suite 8.0 allows remote attackers to affect availability via unknown vectors related to Authentication.
Statement: Oracle OpenSSO is provided as part of the opensso quickstart example application shipped with JBoss Enterprise SOA Platform 5. The CVE-2011-3506, CVE-2011-3517, and CVE-2012-0079 flaws are not exposed unless the opensso quickstart example application is deployed, or you have created and deployed a custom application that is packaged with a copy of Oracle OpenSSO as provided by the opensso quickstart.
The opensso quickstart has been removed in JBoss Enterprise SOA Platform 5.3.0 to address these flaws. Users interested in continui
GHSA
GHSA-f8v7-6hph-cvqj: Unspecified vulnerability in the Oracle OpenSSO component in Oracle Sun Products Suite 7
ghsa_unreviewed·2022-05-17
CVE-2011-3506 [MEDIUM] GHSA-f8v7-6hph-cvqj: Unspecified vulnerability in the Oracle OpenSSO component in Oracle Sun Products Suite 7
Unspecified vulnerability in the Oracle OpenSSO component in Oracle Sun Products Suite 7.1 and 8.0 allows remote attackers to affect integrity via unknown vectors related to Authentication.
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2012-0079 OpenSSO: Unspecified vulnerability allows remote attackers to affect integrity via unknown vectors
bugzilla·2012-01-23·CVSS 4.3
CVE-2012-0079 [MEDIUM] CVE-2012-0079 OpenSSO: Unspecified vulnerability allows remote attackers to affect integrity via unknown vectors
CVE-2012-0079 OpenSSO: Unspecified vulnerability allows remote attackers to affect integrity via unknown vectors
Common Vulnerabilities and Exposures assigned an identifier CVE-2012-0079 to the following vulnerability:
Unspecified vulnerability in Oracle OpenSSO 7.1 and 8.0 allows remote attackers to affect integrity via unknown vectors related to Administration.
References:
[1] http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html
[2] http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0079
Discussion:
Statement:
Oracle OpenSSO is provided as part of the opensso quickstart example application shipped with JBoss Enterprise SOA Platform 5. The CVE-2011-3506, CVE-2011-3517, and CVE-2012-0079 flaws are not exposed unless the opensso quickstart example application i
Bugzilla
CVE-2011-3517 Oracle OpenSSO: unspecified vulnerability in the authentication component
bugzilla·2011-10-26·CVSS 4.3
CVE-2011-3517 [MEDIUM] CVE-2011-3517 Oracle OpenSSO: unspecified vulnerability in the authentication component
CVE-2011-3517 Oracle OpenSSO: unspecified vulnerability in the authentication component
Oracle OpenSSO 8.0 exposes an unspecified vulnerability in the authentication component, allowing a remote attacker to perform a denial of service (CVE-2011-3517).
Discussion:
External References:
http://www.oracle.com/technetwork/topics/security/cpuoct2011-330135.html
---
Statement:
Oracle OpenSSO is provided as part of the opensso quickstart example application shipped with JBoss Enterprise SOA Platform 5. The CVE-2011-3506, CVE-2011-3517, and CVE-2012-0079 flaws are not exposed unless the opensso quickstart example application is deployed, or you have created and deployed a custom application that is packaged with a copy of Oracle OpenSSO as provided by the opensso quickstart.
The opensso qui
Bugzilla
CVE-2011-3506 Oracle OpenSSO: unspecified vulnerability in the authentication component
bugzilla·2011-10-26·CVSS 4.3
CVE-2011-3506 [MEDIUM] CVE-2011-3506 Oracle OpenSSO: unspecified vulnerability in the authentication component
CVE-2011-3506 Oracle OpenSSO: unspecified vulnerability in the authentication component
Oracle OpenSSO 7.1 and 8.0 expose an unspecified vulnerability in the authentication component, allowing attackers to manipulate certain data (CVE-2011-3506).
Discussion:
External References:
http://www.oracle.com/technetwork/topics/security/cpuoct2011-330135.html
---
Statement:
Oracle OpenSSO is provided as part of the opensso quickstart example application shipped with JBoss Enterprise SOA Platform 5. The CVE-2011-3506, CVE-2011-3517, and CVE-2012-0079 flaws are not exposed unless the opensso quickstart example application is deployed, or you have created and deployed a custom application that is packaged with a copy of Oracle OpenSSO as provided by the opensso quickstart.
The opensso quicksta
http://rhn.redhat.com/errata/RHSA-2012-1232.htmlhttp://secunia.com/advisories/46527http://secunia.com/advisories/46528http://secunia.com/advisories/50084http://www.oracle.com/technetwork/topics/security/cpuoct2011-330135.htmlhttp://rhn.redhat.com/errata/RHSA-2012-1232.htmlhttp://secunia.com/advisories/46527http://secunia.com/advisories/46528http://secunia.com/advisories/50084http://www.oracle.com/technetwork/topics/security/cpuoct2011-330135.html
2011-10-18
Published