Executive Summary

This vulnerability exists in the Oracle WebCenter Content product of Oracle Fusion Middleware, specifically in version 14.1.2.0.0. It allows an unauthenticated attacker with network access via HTTP to exploit the system easily. The attacker can gain unauthorized read access to a subset of data accessible through Oracle WebCenter Content.

Useful 0 Not Useful 0

Impact Analysis

The impact of this vulnerability is unauthorized disclosure of information. An attacker can read certain data within Oracle WebCenter Content without authentication, potentially exposing sensitive or confidential information. However, the vulnerability does not allow modification or deletion of data, nor does it affect system availability.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability allows an unauthenticated attacker to gain unauthorized read access to a subset of data in Oracle WebCenter Content. Such unauthorized data access could potentially lead to non-compliance with data protection regulations like GDPR and HIPAA, which require strict controls over access to sensitive and personal information.

However, the provided information does not specify the exact nature of the data exposed or whether it includes personal or protected health information, so the precise impact on compliance cannot be determined from the given context.

Useful 0 Not Useful 0