CVE-2014-2425: Medium severity Oracle Fusion Middleware vulnerability

Published Apr 16, 2014

Updated

Unspecified vulnerability in the Oracle OpenSSO component in Oracle Fusion Middleware 8.0 Update 2 Patch 5 allows remote authenticated users to affect confidentiality via unknown vectors.

Affected Software

1 affected component

Oracle Fusion Middleware=8.0-update2_patch5

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Oracle Fusion Middleware 8.0 Update 2 Patch 5 / Oracle OpenSSO to a version that resolves this vulnerability.
Patch 8.0 Update 2 Patch 5

Event History

Apr 16, 2014

CVE Published

via MITRE·02:05 AM

Data Sourced

via MITRE·02:05 AM

Description

Data Sourced

via NVD·02:55 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of CVE-2014-2425?

CVE-2014-2425 has been classified as a moderate severity vulnerability.

How do I fix CVE-2014-2425?

The recommended fix for CVE-2014-2425 is to apply the latest patch provided by Oracle for Oracle Fusion Middleware.

What components are affected by CVE-2014-2425?

CVE-2014-2425 affects the Oracle OpenSSO component in Oracle Fusion Middleware version 8.0 Update 2 Patch 5.

Can CVE-2014-2425 be exploited remotely?

Yes, CVE-2014-2425 can be exploited by remote authenticated users.

What aspect of security does CVE-2014-2425 impact?

CVE-2014-2425 impacts the confidentiality of the affected system.