Podatność CVE-2018-1271

Podatność CVE-2018-1271

Publikacja: 2018-04-06

Opis:

Typ:

(Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'))

Ogólna skala CVSS	Znaczenie	Łatwość wykorzystania
4.3/10	2.9/10	8.6/10

Affected software
Pivotal software -> Spring framework
Oracle -> Retail open commerce platform
Oracle -> Retail order broker
Oracle -> Application testing suite
Oracle -> Retail point-of-sale
Oracle -> Big data discovery
Oracle -> Retail predictive application server
Oracle -> Communications diameter signaling router
Oracle -> Retail returns management
Oracle -> Enterprise manager ops center
Oracle -> Service architecture leveraging tuxedo
Oracle -> Goldengate for big data
Oracle -> Tape library acsls
Oracle -> Health sciences information manager
Oracle -> Healthcare master person index
Oracle -> Insurance calculation engine
Oracle -> Insurance rules palette
Oracle -> Primavera gateway
Oracle -> Retail back office
Oracle -> Retail central office
Oracle -> Retail customer insights
Oracle -> Retail integration bus

http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html

http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html

http://www.securityfocus.com/bid/103699

https://access.redhat.com/errata/RHSA-2018:1320

https://access.redhat.com/errata/RHSA-2018:2669

https://access.redhat.com/errata/RHSA-2018:2939

https://pivotal.io/security/cve-2018-1271

https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html

https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html