Summaryinfo

A vulnerability was found in Oracle Communications Service Catalog and Design 7.4.2.8.0. It has been classified as critical. Affected is an unknown function of the component PSR Designer. The manipulation leads to information disclosure. This vulnerability is uniquely identified as CVE-2023-33201. The attack is possible to be carried out remotely. No exploit exists.

Detailsinfo

A vulnerability was found in Oracle Communications Service Catalog and Design 7.4.2.8.0 (Cloud Software) and classified as critical. This issue affects an unknown code block of the component PSR Designer. The manipulation with an unknown input leads to a information disclosure vulnerability. Using CWE to declare the problem leads to CWE-200. The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information. Impacted is confidentiality.

The weakness was disclosed 01/16/2024 as Oracle Critical Patch Update Advisory - January 2024. The advisory is shared at oracle.com. The identification of this vulnerability is CVE-2023-33201. Neither technical details nor an exploit are publicly available. MITRE ATT&CK project uses the attack technique T1592 for this issue.

A possible mitigation has been published immediately after the disclosure of the vulnerability.

The vulnerability is also documented in the vulnerability database at EUVD (EUVD-2023-2081). If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Productinfo

Type

• Cloud Software

Vendor

• Oracle

Name

• Communications Service Catalog and Design

Version

• 7.4.2.8.0

License

• commercial

Website

• Vendor: https://www.oracle.com

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion