CVE-2020-5421 in Identity Manager

摘要 (英语)

In Spring Framework versions 5.2.0 - 5.2.8, 5.1.0 - 5.1.17, 5.0.0 - 5.0.18, 4.3.0 - 4.3.28, and older unsupported versions, the protections against RFD attacks from CVE-2015-5211 may be bypassed depending on the browser used through the use of a jsessionid path parameter.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

负责

Pivotal Software, Inc.

预定

2020-01-03

披露

2023-01-25

状态

已确认

条目

VulDB provides additional information and datapoints for this CVE:

标识符	漏洞	CWE	可利用	对策	CVE
251184	Oracle Identity Manager Third Party		未定义	官方修复	CVE-2020-5421
198193	Oracle StorageTek ACSLS Software		未定义	官方修复	CVE-2020-5421
190785	Oracle Communications Design Studio Inventory		未定义	官方修复	CVE-2020-5421
179254	Oracle StorageTek Tape Analytics SW Tool Spring		未定义	官方修复	CVE-2020-5421
179231	Oracle Retail Customer Engagement Spring		未定义	官方修复	CVE-2020-5421
179215	Oracle Retail Merchandising System Spring 权限提升		未定义	官方修复	CVE-2020-5421
179214	Oracle Retail Customer Management and Segmentation Foundation Spring 权限提升		未定义	官方修复	CVE-2020-5421
179094	Oracle Enterprise Data Quality Spring 权限提升		未定义	官方修复	CVE-2020-5421
173632	Oracle Retail Xstore Point of Service Xenvironment 权限提升		未定义	官方修复	CVE-2020-5421
173631	Oracle Retail Predictive Application Server RPAS Fusion Client 权限提升		未定义	官方修复	CVE-2020-5421
173499	Oracle Fusion Middleware Centralized Thirdparty Jars 权限提升		未定义	官方修复	CVE-2020-5421
173478	Oracle FLEXCUBE Private Banking Financial Planning 权限提升		未定义	官方修复	CVE-2020-5421
173355	Oracle Communications Unified Inventory Management Reservations 权限提升		未定义	官方修复	CVE-2020-5421
168427	Oracle Retail Service Backbone RSB kernel		未定义	官方修复	CVE-2020-5421
168426	Oracle Retail Invoice Matching Security		未定义	官方修复	CVE-2020-5421
168425	Oracle Retail Integration Bus RIB Kernal		未定义	官方修复	CVE-2020-5421
168424	Oracle Retail Financial Integration PeopleSoft Integration		未定义	官方修复	CVE-2020-5421
168423	Oracle Retail Assortment Planning Application Core		未定义	官方修复	CVE-2020-5421
168409	Oracle Retail Order Broker System Administration 权限提升		未定义	官方修复	CVE-2020-5421
168357	Oracle MySQL Enterprise Monitor Service Manager		未定义	官方修复	CVE-2020-5421
168346	Oracle Insurance Rules Palette Architecture		未定义	官方修复	CVE-2020-5421
168345	Oracle Insurance Policy Administration Architecture		未定义	官方修复	CVE-2020-5421
168342	Oracle Hyperion Infrastructure Technology Installation/Configuration		未定义	官方修复	CVE-2020-5421
168321	Oracle WebLogic Server Sample apps		未定义	官方修复	CVE-2020-5421
168320	Oracle GoldenGate Application Adapters		未定义	官方修复	CVE-2020-5421
168292	Oracle Endeca Information Discovery Integrator Integrator ETL 权限提升		未定义	官方修复	CVE-2020-5421
168264	Oracle Financial Services Analytical Applications Infrastructure		未定义	官方修复	CVE-2020-5421
168184	Oracle Primavera P6 Enterprise Project Portfolio Management Web access		未定义	官方修复	CVE-2020-5421
168183	Oracle Primavera Gateway Admin		未定义	官方修复	CVE-2020-5421
168176	Oracle Communications Session Report Manager Spring		未定义	官方修复	CVE-2020-5421
168164	Oracle Communications BRM Spring		未定义	官方修复	CVE-2020-5421
161623	Spring Framework RFD 权限提升	269	未定义	未定义	CVE-2020-5421

来源

• MITRE
• NVD
• CVE Details