CVE-2017-3240: Infoleak
Vulnerability in the RDBMS Security component of Oracle Database Server. The supported version that is affected is 12.1.0.2. Easily exploitable vulnerability allows low privileged attacker having Local Logon privilege with logon to the infrastructure where RDBMS Security executes to compromise RDBMS Security. Successful attacks of this vulnerability can result in unauthorized read access to a subset of RDBMS Security accessible data. CVSS v3.0 Base Score 3.3 (Confidentiality impacts).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-3240?
CVE-2017-3240 is rated as a low severity vulnerability that can be exploited by low privileged attackers.
How do I fix CVE-2017-3240?
To fix CVE-2017-3240, apply the latest security patch recommended by Oracle for version 12.1.0.2.
Who is affected by CVE-2017-3240?
CVE-2017-3240 affects Oracle Database Server version 12.1.0.2 users with local logon privileges.
What type of attacks can exploit CVE-2017-3240?
CVE-2017-3240 can be exploited to compromise the RDBMS Security component by low privileged attackers.
When was CVE-2017-3240 disclosed?
CVE-2017-3240 was disclosed in January 2017 as part of Oracle's Critical Patch Update.