CVE-2023-23951 Ability to enumerate the Oracle LDAP attributes for the current user by modifying the query used by the application

Description

Ability to enumerate the Oracle LDAP attributes for the current user by modifying the query used by the application

Affected products and versions

Product	Affected versions	Fixed in
Symantec Identity Management And Governance	Versions not published

Other CVEs of Symantec Identity Management And Governance

The 3 CVEs of Symantec Identity Management And Governance →

CVE-2023-23949 An authenticated user can supply malicious HTML and JavaScript code that will be executed in the client browser 8.1 High CVE-2023-23950 User’s supplied input (usually a CRLF sequence) can be used to split a returning response into two responses 6.1 Medium