Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
356
VMScore

CVE-2021-2173

Published: 22/04/2021 Updated: 15/03/2023
CVSS v2 Base Score: 4 | Impact Score: 2.9 | Exploitability Score: 8
CVSS v3 Base Score: 4.1 | Impact Score: 1.4 | Exploitability Score: 2.3
VMScore: 356
Vector: AV:N/AC:L/Au:S/C:P/I:N/A:N
Subscribe to Oracle

Vulnerability Summary

Vulnerability in the Recovery component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1, 18c and 19c. Easily exploitable vulnerability allows high privileged attacker having DBA Level Account privilege with network access via Oracle Net to compromise Recovery. While the vulnerability is in Recovery, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Recovery accessible data. CVSS 3.1 Base Score 4.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N).

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

oracle database server 12.1.0.2

oracle database server 12.2.0.1

oracle database server 18c

oracle database server 19c

Exploits

Exploit DB: Oracle DB Broken PDB Isolation / Metadata Exposure
Proof of concept details for Oracle database versions 12102, 12201, 18c, and 19c that had a PDB isolation vulnerability allowing viewing of metadata for a different database within the same container ...

Github Repositories

https://github.com/emad-almousa/CVE-2021-2173

CVE-2021-2173

CVE-2021-2173 CVE-2021-2173 PoC is explained here: databasesecurityninjawordpresscom/2021/06/04/cve-2021-2173-pdb-isolation-is-broken-through-metadata-exposure/ Oracle Critical Patch Update Advisory - April 2021: wwworaclecom/security-alerts/cpuapr2021html

References

NVD-CWE-noinfohttps://www.oracle.com/security-alerts/cpuapr2021.htmlhttps://github.com/emad-almousa/CVE-2021-2173http://packetstormsecurity.com/files/171344/Oracle-DB-Broken-PDB-Isolation-Metadata-Exposure.htmlhttps://nvd.nist.govhttps://github.com/emad-almousa/CVE-2021-2173https://packetstormsecurity.com/files/171344/Oracle-DB-Broken-PDB-Isolation-Metadata-Exposure.html
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27322administrator privilegesCVE-2024-1579hardcodedCVE-2023-20198CVE-2024-33587CVE-2024-33449CVE-2024-4308HTML injection
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook