CVE-2024-23847: Medium severity Oracle Unifier vulnerability

Published May 31, 2024

Updated

Incorrect default permissions issue exists in Unifier and Unifier Cast. If this vulnerability is exploited, arbitrary code may be executed with LocalSystem privilege. As a result, a malicious program may be installed, data may be altered or deleted.

Affected Software

2 affected components

Oracle Unifier

Oracle Unifier Cast

Event History

May 31, 2024

CVE Published

via MITRE·06:11 AM

Data Sourced

via MITRE·06:11 AM

DescriptionSeverity

Data Sourced

via NVD·06:15 AM

DescriptionSeverityWeakness

Oct 31, 58299

Event

via NVD·04:44 PM

Frequently Asked Questions

What is the severity of CVE-2024-23847?

CVE-2024-23847 is classified as a critical vulnerability due to its potential for remote code execution with LocalSystem privileges.

What are the consequences of exploiting CVE-2024-23847?

Exploiting CVE-2024-23847 may allow attackers to execute arbitrary code, potentially leading to data alteration, deletion, or unauthorized program installation.

Who is affected by CVE-2024-23847?

CVE-2024-23847 affects users of Oracle Unifier and Oracle Unifier Cast.

How do I fix CVE-2024-23847?

To fix CVE-2024-23847, ensure that you apply the latest security patches released by Oracle for Unifier and Unifier Cast.

What is the nature of the issue in CVE-2024-23847?

CVE-2024-23847 involves incorrect default permissions that can be exploited for privilege escalation.