Intrusion PreventionOracle.Tuxedo.Jolt.J_AUTHCHECK.J_ESTCON.Information.Disclosure
Description
This indicates an attack attempt to exploit an Information Disclosure vulnerability in Oracle's Tuxedo and PeopleSoft products.
The vulnerability is due to an error in the vulnerable application when handling a maliciously crafted request. A remote attacker may be able to exploit this to disclose memory of a target system, via a crafted request.
Affected Products
Oracle PeopleSoft Products
Oracle Tuxedo 12.2.2
Oracle Tuxedo 12.1.3
Oracle Tuxedo 12.1.1
Oracle Tuxedo 11.1.1
Impact
Information Disclosure: Remote attackers can gain sensitive information from vulnerable systems
Recommended Actions
Apply the most recent upgrade or patch from the vendor.
http://www.oracle.com/technetwork/security-advisory/alert-cve-2017-10269-4021872.html
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
Version Updates
| Date | Version | Detail |
|---|---|---|
| 2019-06-06 | 14.627 | Severity:medium:critical |
| ID | 45165 |
| Created | Dec 21, 2017 |
| Updated | May 04, 2022 |
| Risk |
|
| CVE ID | CVE-2017-10272 |
| Exploit Prediction Score | 0.92% |
| Default Action | drop |
| Active | |
| Affected OS | Windows, Linux |
| Affected App | Oracle |