Detections
Analytics
Oracle Secure Global Desktop Multiple Vulnerabilities (January 2019 CPU)
medium Nessus Plugin ID 121601
Language:
Synopsis
An application installed on the remote host is affected by multiple vulnerabilities.Description
The version of Oracle Secure Global Desktop installed on the remote host is 5.4 and is missing a security patch from the January 2019 Critical Patch Update (CPU). It is, therefore, affected by multiple vulnerabilities:- A denial of service (DoS) vulnerability exists in Apache HTTP Server 2.4.17 to 2.4.34, due to a design error. An unauthenticated, remote attacker can exploit this issue by sending continuous, large SETTINGS frames to cause a client to occupy a connection, server thread and CPU time without any connection timeout coming to effect. This affects only HTTP/2 connections.
A possible mitigation is to not enable the h2 protocol.
(CVE-2018-11763).
- An unvalidated redirect vulnerability exists in the default servlet in Apache Tomcat due to improper input validation. An unauthenticated remote attack can exploit this issue via a specially crafted URL to cause the redirect to be generated to any URI of the attackers choice. (CVE-2018-11784)
Solution
Apply the appropriate patch according to the January 2019 Oracle Critical Patch Update advisory.See Also
Plugin Details
Severity: Medium
ID: 121601
File Name: oracle_secure_global_desktop_jan_2019_cpu.nasl
Version: 1.5
Type: local
Agent: windows, macosx, unix
Family: Misc.
Published: 2/5/2019
Updated: 10/25/2021
Supported Sensors: Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Low
Score: 3.6
CVSS v2
Risk Factor: Medium
Base Score: 4.3
Temporal Score: 3.4
Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:P/A:N
CVSS Score Source: CVE-2018-11784
CVSS v3
Risk Factor: Medium
Base Score: 4.3
Temporal Score: 3.9
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Temporal Vector: CVSS:3.0/E:P/RL:O/RC:C
Vulnerability Information
CPE: cpe:/a:oracle:virtualization_secure_global_desktop
Required KB Items: Host/Oracle_Secure_Global_Desktop/Version
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 1/15/2019
Vulnerability Publication Date: 9/25/2018
Reference Information
CVE: CVE-2018-11763, CVE-2018-11784