OSVDB ID: 81413

Title: Oracle FLEXCUBE Direct Banking Virtual Banking Component Unspecified Remote Information Disclosure

Info

Disclosure
Apr 18, 2012

Discovery
Unknown

Dates

Exploit
Unknown

Solution
Apr 18, 2012

Description

 Oracle FLEXCUBE Direct Banking contains a flaw related to the Virtual Banking component that may lead to an unauthorized information disclosure.  The issue may allow an authenticated remote attack to potentially gain access to sensitive information.

Classification

 Location: Remote / Network Access
Attack Type: Information Disclosure
Impact: Loss of Confidentiality
Solution: Patch / RCS
Exploit: Exploit Unknown
Disclosure: Vendor Verified
OSVDB: Authentication Required

Solution

 Currently, there are no known workarounds or upgrades to correct this issue. However, Oracle has released a patch to address this vulnerability. Check the vendor advisory in the references section.

Products

Oracle Corporation

FLEXCUBE Direct Banking

 5.0.2
5.3.0
5.3.1
5.3.2
5.3.3
5.3.4
6.0.1
6.2.0

References

Credit

Unknown or Incomplete


Direct URL: http://osvdb.org/81413