CVE-2024-21067 — Improper Access Control in Corporation Enterprise Manager Base Platform

CWE-284 — Improper Access Control4 documents4 sources
Severity
8.8HIGHNVD
EPSS
0.2%
top 58.59%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Oracle Corporation Enterprise Manager Base PlatformOracle Enterprise Manager Base Platform
Timeline
PublishedApr 16
Latest updateApr 17

Description

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Host Management). The supported version that is affected is 13.5.0.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Enterprise Manager Base Platform executes to compromise Oracle Enterprise Manager Base Platform. While the vulnerability is in Oracle Enterprise Manager Base Platform, attacks may significantly impact additiona…

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:HExploitability: 2.0 | Impact: 6.0

Affected Packages2 packages

🔴Vulnerability Details

2
GHSA
GHSA-cj2r-9qx3-cf53: Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Host Management)↗2024-04-17
▶
CVEList
CVE-2024-21067: Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Host Management)↗2024-04-16
▶

📋Vendor Advisories

1
Oracle
Oracle Oracle Enterprise Manager Risk Matrix: Host Management — CVE-2024-21067↗2024-04-15
▶
CVE-2024-21067 — Improper Access Control | cvebase