Compliance Impact

This vulnerability allows an unauthenticated attacker to compromise Oracle Identity Manager, potentially leading to unauthorized creation, deletion, or modification of critical data. Such unauthorized access and data manipulation can negatively impact the integrity of sensitive information.

Compromise of data integrity and unauthorized access to critical data can lead to non-compliance with regulations like GDPR and HIPAA, which require strict controls over data access, integrity, and protection of personal and sensitive information.

Useful 0 Not Useful 0

Executive Summary

This vulnerability exists in the Identity Manager product of Oracle Fusion Middleware, specifically in the REST WebServices component. It affects supported versions 12.2.1.4.0 and 14.1.2.1.0.

The vulnerability is easily exploitable by an unauthenticated attacker who has network access via HTTP. Such an attacker can compromise the Identity Manager.

Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data or any data accessible through Identity Manager.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability can have a significant impact as it allows an unauthenticated attacker to compromise the Identity Manager remotely.

The attacker could create, delete, or modify critical data or any data accessible via Identity Manager without authorization.

This can lead to integrity issues within your system, potentially disrupting operations or causing data corruption.

Useful 0 Not Useful 0