This vulnerability allows network-adjacent malicious users to compromise transport security on affected installations of Oracle ODP.NET Managed Driver. An attacker must first obtain the ability to intercept and alter network traffic in order to exploit this vulnerability. The specific flaw exists within the ValidateRemoteCertificate function. The issue results from the lack of proper validation of the server certificate. An attacker can leverage this vulnerability to disclose communications between the client and the server or to insert fraudulent server responses.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
oracle database server 19c |
||
oracle database server 21c |
Vulmon