SearchSecurity.com

Mitigations for an Oracle database authentication vulnerability

A recently patched Oracle 12 database vulnerability, which exposed a flaw in the authentication process, allowed hackers to link a particular password hash with a session key. Oracle didn't patch the issue in version 11.1, which is the version in use at my organization. How much danger does this pose for enterprises? Do you have any tips for dealing with this vulnerability for version 11.1 users?

    Requires Free Membership to View

All Rights Reserved, Copyright 2000 - 2013 , TechTarget | Read our Privacy Statement