CVE-2008-5446
First published: Wed Jan 14 2009(Updated: )
Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10 CU2 and 12.0.6 allows remote authenticated users to affect confidentiality via unknown vectors. NOTE: the previous information was obtained from the January 2009 CPU. Oracle has not commented on reliable researcher claims that this issue is related to unrestricted guest access to the "About Us Page" in the Oracle Applications Framework (OAF), which allows attackers to obtain sensitive system and application environment information.
Credit: secalert_us@oracle.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Oracle E-Business Suite 12 | =12.0.6 | |
| Oracle E-Business Suite | =11.5-cu2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://secniche.org/papers/orabs.pdf
- http://secunia.com/advisories/33525
- http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html
- http://www.securityfocus.com/archive/1/500171/100/0/threaded
- http://www.securityfocus.com/bid/33177
- http://www.securitytracker.com/id?1021568
- http://www.vupen.com/english/advisories/2009/0115
Frequently Asked Questions
What is the severity of CVE-2008-5446?
CVE-2008-5446 is classified as a moderate severity vulnerability.
How do I fix CVE-2008-5446?
Fixing CVE-2008-5446 requires applying the latest security patches from Oracle for the affected versions of E-Business Suite.
Who is affected by CVE-2008-5446?
CVE-2008-5446 affects remote authenticated users of Oracle E-Business Suite versions 11.5.10 CU2 and 12.0.6.
What impact does CVE-2008-5446 have on confidentiality?
CVE-2008-5446 allows remote authenticated users to potentially compromise the confidentiality of data.
When was CVE-2008-5446 disclosed?
CVE-2008-5446 was disclosed in January 2009 as part of Oracle's Critical Patch Update.
- agent/references
- agent/weakness
- agent/severity
- agent/author
- agent/type
- agent/description
- agent/event
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-historical
- vendor/oracle
- canonical/oracle e-business suite
- version/oracle e-business suite/11.5-cu2
- canonical/oracle e-business suite 12
- version/oracle e-business suite 12/12.0.6