CVE-2021-2303 Vulnerability in the OSS Support Tools product of Oracle Support Tools (component: Diagnostic Assistant).

What is CVE-2021-2303?

CVE-2021-2303 is a medium-severity vulnerability in Oracle Corporation OSS Support Tools, published on 22 Apr 2021.

Official description

Vulnerability in the OSS Support Tools product of Oracle Support Tools (component: Diagnostic Assistant). The supported version that is affected is Prior to 2.12.41. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise OSS Support Tools. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all OSS Support Tools accessible data. CVSS 3.1 Base Score 4.9 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N).

Which versions are affected by CVE-2021-2303?

It affects 1 product.

Products include Oracle Oss Support Tools.

How do I fix CVE-2021-2303?

No fix has been published for CVE-2021-2303 yet. Limit exposure of the affected software until one is available.

Is CVE-2021-2303 being exploited?

There is no known exploitation of CVE-2021-2303 in the wild and no public exploit code.

Other vulnerabilities in Oracle Corporation OSS Support Tools

• CVE-2018-2615 Auth bypass in OSS Support Tools High 8.8
• CVE-2018-2616 Auth bypass in OSS Support Tools High 8.8
• CVE-2018-2617 Information disclosure in OSS Support Tools High 7.5
• CVE-2022-21405 Information disclosure in OSS Support Tools Medium 5.5

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-gwhp-rphj-77jh.