{
  "id": "CVE-2015-0461",
  "sourceIdentifier": "secalert_us@oracle.com",
  "published": "2015-04-16T16:59:18.863",
  "lastModified": "2024-11-21T02:23:07.443",
  "vulnStatus": "Modified",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.1.5 and 11.1.1.7 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Authentication Engine."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad no especificada en el componente Oracle Access Manager en Oracle Fusion Middleware 11.1.1.5 y 11.1.1.7 permite a usuarios remotos autenticados afectar la confidencialidad y la integridad a trav\u00e9s de vectores desconocidos relacionados con Authentication Engine."
    }
  ],
  "metrics": {
    "cvssMetricV2": [
      {
        "source": "nvd@nist.gov",
        "type": "Primary",
        "cvssData": {
          "version": "2.0",
          "vectorString": "AV:N/AC:M/Au:S/C:P/I:C/A:N",
          "baseScore": 7.0,
          "accessVector": "NETWORK",
          "accessComplexity": "MEDIUM",
          "authentication": "SINGLE",
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "COMPLETE",
          "availabilityImpact": "NONE"
        },
        "baseSeverity": "HIGH",
        "exploitabilityScore": 6.8,
        "impactScore": 7.8,
        "acInsufInfo": false,
        "obtainAllPrivilege": false,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "weaknesses": [
    {
      "source": "nvd@nist.gov",
      "type": "Primary",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ]
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:oracle:fusion_middleware:11.1.1.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "17C34DCB-BCD3-4432-BB1A-EDD6AB8CBEF2"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:oracle:fusion_middleware:11.1.1.7:*:*:*:*:*:*:*",
              "matchCriteriaId": "6557F5A6-98AA-4D70-A8EF-F9303CBD9D0C"
            }
          ]
        }
      ]
    }
  ],
  "references": [
    {
      "url": "http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html",
      "source": "secalert_us@oracle.com",
      "tags": [
        "Vendor Advisory"
      ]
    },
    {
      "url": "http://www.securitytracker.com/id/1032131",
      "source": "secalert_us@oracle.com"
    },
    {
      "url": "http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ]
    },
    {
      "url": "http://www.securitytracker.com/id/1032131",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ]
}