Oracle FLEXCUBE Direct Banking CVE-2012-3145 Local Security Vulnerability

Bugtraq ID:	55994
Class:	Unknown
CVE:	CVE-2012-3145
Remote:	No
Local:	Yes
Published:	Oct 16 2012 12:00AM
Updated:	Mar 19 2015 09:35AM
Credit:	Oracle
Vulnerable:	Oracle FLEXCUBE Direct Banking 6.2 Oracle FLEXCUBE Direct Banking 5.3.4 Oracle FLEXCUBE Direct Banking 5.3.3 Oracle FLEXCUBE Direct Banking 5.3.2 Oracle FLEXCUBE Direct Banking 5.3.1 Oracle FLEXCUBE Direct Banking 5.3 Oracle FLEXCUBE Direct Banking 5.0.2
Not Vulnerable:

Oracle FLEXCUBE Direct Banking CVE-2012-3145 Local Security Vulnerability

Oracle FLEXCUBE Direct Banking is prone to a local security vulnerability.

The vulnerability can be exploited over the 'HTTP' protocol. The 'BASE' sub component is affected.

This vulnerability affects the following supported versions:
5.0.2, 5.0.5, 5.1.0, 5.2.0, 5.3.0 - 5.3.4, 6.2.0

Oracle FLEXCUBE Direct Banking CVE-2012-3145 Local Security Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Oracle FLEXCUBE Direct Banking CVE-2012-3145 Local Security Vulnerability

Solution:
Vendor updates are available. Please contact the vendor for more information.

Oracle FLEXCUBE Direct Banking CVE-2012-3145 Local Security Vulnerability

References:

• Oracle Critical Patch Update Advisory - October 2012 (Oracle)