Title

Allround Automations PL/SQL Developer Remote Code Execution Vulnerability (Cat I impact)

Discussion

Allround Automation has released a security update in PL/SQL Developer 11. PL/SQL Developer is a tool for developers and database administrators to access Oracle. To exploit this vulnerability, an attacker would perform a man-in-the-middle attack and wait for data to be transmitted between the client and a server, then intercepted the traffic. If successfully exploited, this vulnerability would allow an attacker to execute arbitrary code in the context of the affected application.

Check Content

Fix Text

Additional Identifiers

Rule ID:

Vulnerability ID: V-68713

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.