Vulnerability CVE-2010-4453 - CERT Civis.Net

Vulnerability Name:

CVE-2010-4453 (CCN-64766)

Assigned:

2010-12-06

Published:

2011-01-19

Updated:

2018-10-30

Summary:

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 7.0.7, 8.1.6, 9.0, 9.1, 9.2.4, 10.0.2, 10.3.2, and 10.3.3 allows remote attackers to affect integrity via unknown vectors related to Servlet Container.

CVSS v3 Severity:

5.3 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): None Integrity (I): Low Availibility (A): None

CVSS v2 Severity:

4.3 Medium (CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N)
3.2 Low (Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Medium Authentication (Au): None
Impact Metrics:	Confidentiality (C): None Integrity (I): Partial Availibility (A): None

4.3 Medium (CCN CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N)
3.2 Low (CCN Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Medium Athentication (Au): None
Impact Metrics:	Confidentiality (C): None Integrity (I): Partial Availibility (A): None

Vulnerability Type:

Vulnerability Consequences:

Gain Access

References:

Source: MITRE
Type: CNA
CVE-2010-4453

Source: OSVDB
Type: UNKNOWN
70584

Source: CCN
Type: SA42975
Oracle WebLogic Server Three Vulnerabilities

Source: SECUNIA
Type: UNKNOWN
42975

Source: CCN
Type: SECTRACK ID: 1024981
Oracle Fusion Middleware Flaws Let Remote Users Execute Arbitrary Code, Access and Modify Data, and Deny Service

Source: CCN
Type: Oracle Critical Patch Update Advisory - January 2011
Oracle Critical Patch Update Advisory - January 2011

Source: CONFIRM
Type: Vendor Advisory
http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html

Source: CCN
Type: OSVDB ID: 70584
Oracle Fusion Middleware WebLogic Server Servlet Container Unspecified Remote Issue (2010-4453)

Source: BID
Type: UNKNOWN
45877

Source: CCN
Type: BID-45877
Oracle Fusion Middleware CVE-2010-4453 Remote Oracle WebLogic Server Vulnerability

Source: SECTRACK
Type: UNKNOWN
1024981

Source: VUPEN
Type: UNKNOWN
ADV-2011-0143

Source: XF
Type: UNKNOWN
weblogic-container-unspecified(64766)

Source: XF
Type: UNKNOWN
weblogic-container-unspecified(64766)

Vulnerable Configuration:

Configuration 1:

cpe:/a:oracle:fusion_middleware:7.0.7:*:*:*:*:*:*:*

OR cpe:/a:oracle:fusion_middleware:8.1.6:*:*:*:*:*:*:*

OR cpe:/a:oracle:fusion_middleware:9.0:*:*:*:*:*:*:*

OR cpe:/a:oracle:fusion_middleware:9.1:*:*:*:*:*:*:*

OR cpe:/a:oracle:fusion_middleware:9.2.4:*:*:*:*:*:*:*

OR cpe:/a:oracle:fusion_middleware:10.0.2:*:*:*:*:*:*:*

OR cpe:/a:oracle:fusion_middleware:10.3.2:*:*:*:*:*:*:*

OR cpe:/a:oracle:fusion_middleware:10.3.3:*:*:*:*:*:*:*

OR cpe:/a:oracle:weblogic_server:7.0.7:*:*:*:*:*:*:*

OR cpe:/a:oracle:weblogic_server:8.1.6:*:*:*:*:*:*:*

OR cpe:/a:oracle:weblogic_server:9.0:*:*:*:*:*:*:*

OR cpe:/a:oracle:weblogic_server:9.1:*:*:*:*:*:*:*

OR cpe:/a:oracle:weblogic_server:9.2.4:*:*:*:*:*:*:*

OR cpe:/a:oracle:weblogic_server:10.0.2:*:*:*:*:*:*:*

OR cpe:/a:oracle:weblogic_server:10.3.2.0.0:*:*:*:*:*:*:*

OR cpe:/a:oracle:weblogic_server:10.3.3.0.0:*:*:*:*:*:*:*

Configuration CCN 1:

cpe:/a:oracle:weblogic_server:9.0:*:*:*:*:*:*:*

OR cpe:/a:oracle:weblogic_server:9.1:*:*:*:*:*:*:*

OR cpe:/a:oracle:weblogic_server:10.3.2.0.0:*:*:*:*:*:*:*

OR cpe:/a:oracle:weblogic_server:10.3.3.0.0:*:*:*:*:*:*:*

Denotes that component is vulnerable