CVE-2017-9278 Vulnerability Details

  /     /     /  

CVE-2017-9278 Metadata Quick Info

CVE Published: 02/03/2018 | CVE Updated: 16/09/2024 | CVE Year: 2017
Source: microfocus | Vendor: NetIQ | Product: Identity Manager Oracle EBS driver
Status : PUBLISHED

---

CVE-2017-9278 Description

The NetIQ Identity Manager Oracle EBS driver before 4.0.2.0 sent EBS logs containing the driver authentication password, potentially disclosing this to attackers able to read the EBS tables.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID:
CWE Name: password disclosure via logging
Source: NetIQ

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).