漏洞描述
Oracle iPlanet Web Server 7.0.x has incorrect access control for admingui/version URIs in the Administration console, as demonstrated by unauthenticated read access to encryption keys. NOTE a related support policy can be found in the www.oracle.com references attached to this CVE.
影响产品
修复建议
建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。
参考链接
www.cvebase.comhttps://www.cvebase.com/cve/2020/9315↗www.oracle.comhttps://www.oracle.com/support/lifetime-support/↗www.oracle.comhttps://www.oracle.com/us/assets/lifetime-support-middleware-069163.pdf↗wwws.nightwatchcybersecurity.comhttps://wwws.nightwatchcybersecurity.com/2020/05/10/two-vulnerabilities-in-oracles-iplanet-web-server-cve-2020-9315-and-cve-2020-9314/↗nvd.nist.govhttps://nvd.nist.gov/vuln/detail/CVE-2020-9315↗