Intrusion PreventionOracle.Application.Testing.Suite.Authentication.Bypass
Description
This indicates an attack attempt to exploit an Authentication Bypass vulnerability in Oracle's Application Testing Suite.
The vulnerability is caused by an improper validation of user supplied data when the vulnerable application handles a maliciously crafted request. An attacker can exploit this to bypass authentication process and gain unauthorized access to the affected application.
Affected Products
Oracle Application Testing Suite 12.4.0.2
Oracle Application Testing Suite 12.5.0.2
Impact
System Compromise: Remote attackers can gain control of vulnerable systems.
Recommended Actions
Apply the most recent upgrade or patch from the vendor
http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 42095 |
| Created | Feb 19, 2016 |
| Updated | Nov 15, 2021 |
| Risk |
|
| CVE ID | CVE-2016-0492 CVE-2016-0488 |
| Exploit Prediction Score | 97.12% |
| Default Action | drop |
| Active | |
| Affected OS | Windows, Linux |
| Affected App | Oracle |