CVE-2019-2430: Medium severity oracle health sciences argus safety vulnerability

Published Jan 16, 2019

Updated

Vulnerability in the Oracle Argus Safety component of Oracle Health Sciences Applications (subcomponent: Console). Supported versions that are affected are 8.1 and 8.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Argus Safety. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Argus Safety accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).

Affected Software

2 affected components

Oracle Argus Safety=8.1

Oracle Argus Safety=8.2

Remediation

Patch Available

http://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html

Event History

Jan 16, 2019

CVE Published

via MITRE·07:00 PM

Data Sourced

via MITRE·07:00 PM

DescriptionWeakness

Data Sourced

via NVD·07:30 PM

RemedyDescriptionSeverityAffected Software

Frequently Asked Questions

What is the vulnerability ID for this Oracle Argus Safety vulnerability?

The vulnerability ID for this Oracle Argus Safety vulnerability is CVE-2019-2430.

What is the severity level of CVE-2019-2430?

The severity level of CVE-2019-2430 is medium with a CVSS score of 6.5.

Which versions of Oracle Argus Safety are affected by CVE-2019-2430?

Versions 8.1 and 8.2 of Oracle Argus Safety are affected by CVE-2019-2430.

How can a low privileged attacker exploit CVE-2019-2430?

A low privileged attacker with network access via HTTP can exploit CVE-2019-2430 to compromise Oracle Argus Safety.

Where can I find more information about CVE-2019-2430?

You can find more information about CVE-2019-2430 on the Oracle Security Advisory and SecurityFocus websites.