Detections
Analytics
Oracle Application Server < 10.1.0.0.4 Logging Service Interruption
medium Nessus Network Monitor Plugin ID 2882
Synopsis
The remote host is vulnerable to a flaw that would allow a single user to affect logging-level changes for all users of a database.Description
The remote host is running the Oracle Application Server. This version is reported vulnerable to a flaw where a SYS user can disable Fine Grained Auditing (FGA) which then impacts the logging level of all users of the database.Solution
Upgrade to version 10.1.0.0.4 or higher.Plugin Details
Severity: Medium
ID: 2882
Family: Web Servers
Published: 5/5/2005
Updated: 3/6/2019
Risk Information
VPR
Risk Factor: Medium
Score: 6.7
CVSS v2
Risk Factor: Medium
Base Score: 5.1
Temporal Score: 4.3
Vector: CVSS2#AV:N/AC:H/Au:N/C:P/I:P/A:P
CVSS v3
Risk Factor: Medium
Base Score: 5.6
Temporal Score: 5.1
Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
Temporal Vector: CVSS:3.0/E:U/RL:U/RC:X
Vulnerability Information
CPE: cpe:/a:oracle:application_server