{"id":5797,"date":"2017-10-31T09:14:53","date_gmt":"2017-10-31T15:14:53","guid":{"rendered":"http:\/\/allidm.com\/blog\/?p=5797"},"modified":"2017-10-31T09:14:53","modified_gmt":"2017-10-31T15:14:53","slug":"oracle-has-fixed-a-critical-vulnerability-in-identity-manager","status":"publish","type":"post","link":"https:\/\/allidm.com\/blog\/oracle-has-fixed-a-critical-vulnerability-in-identity-manager\/","title":{"rendered":"Oracle has fixed a critical vulnerability in Identity Manager"},"content":{"rendered":"<h2>Oracle has fixed a critical vulnerability in Identity Manager<\/h2>\n<p>Oracle informed customers on Friday that its Identity Manager product is affected by a critical vulnerability that can be easily exploited by malicious actors.<\/p>\n<p>Part of the company\u2019s Oracle Fusion Middleware offering, Identity Manager is an enterprise identity management system that automatically manages user access privileges across all of the organization\u2019s resources.<\/p>\n<p>Oracle Identity Manager is affected by a flaw that allows an unauthenticated attacker with access to the network to take control of the product. The security hole exists due to a default account that can be accessed over HTTP.<\/p>\n<p>The vulnerability, tracked as CVE-2017-10151 and assigned a CVSS score of 10, has been described by Oracle as easy to exploit without any user interaction.<\/p>\n<p>Read more at &#8211; <a href=\"http:\/\/www.securityweek.com\/oracle-patches-critical-flaw-identity-manager\" rel=\"noopener\" target=\"_blank\">Oracle has fixed a critical vulnerability in Identity Manager<\/a><\/p>\n<p><a href=\"https:\/\/i0.wp.com\/allidm.com\/blog\/wp-content\/uploads\/2015\/11\/Allidm-IdentityAccessManagement.png\"><img data-recalc-dims=\"1\" decoding=\"async\" data-attachment-id=\"4613\" data-permalink=\"https:\/\/allidm.com\/blog\/logmote-has-launched-its-unified-authentication-single-sign-on-sso-solution-into-the-global-security-market\/allidm-identityaccessmanagement\/#main\" data-orig-file=\"https:\/\/i0.wp.com\/allidm.com\/blog\/wp-content\/uploads\/2015\/11\/Allidm-IdentityAccessManagement.png?fit=10%2C10&amp;ssl=1\" data-orig-size=\"10,10\" data-comments-opened=\"1\" data-image-meta=\"{&quot;aperture&quot;:&quot;0&quot;,&quot;credit&quot;:&quot;&quot;,&quot;camera&quot;:&quot;&quot;,&quot;caption&quot;:&quot;&quot;,&quot;created_timestamp&quot;:&quot;0&quot;,&quot;copyright&quot;:&quot;&quot;,&quot;focal_length&quot;:&quot;0&quot;,&quot;iso&quot;:&quot;0&quot;,&quot;shutter_speed&quot;:&quot;0&quot;,&quot;title&quot;:&quot;&quot;,&quot;orientation&quot;:&quot;0&quot;}\" data-image-title=\"Allidm Identity Access Management Post Image\" data-image-description=\"&lt;p&gt;Identity and Access Management Post Image&lt;\/p&gt;\n\" data-image-caption=\"\" data-large-file=\"https:\/\/i0.wp.com\/allidm.com\/blog\/wp-content\/uploads\/2015\/11\/Allidm-IdentityAccessManagement.png?fit=10%2C10&amp;ssl=1\" loading=\"lazy\" src=\"https:\/\/i0.wp.com\/allidm.com\/blog\/wp-content\/uploads\/2015\/11\/Allidm-IdentityAccessManagement.png?resize=10%2C10\" alt=\"Allidm Identity Access Management Post Image\" width=\"10\" height=\"10\" class=\"alignnone size-full wp-image-4613\" \/><\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Oracle has fixed a critical vulnerability in Identity Manager Oracle informed customers on Friday that its Identity Manager product is affected by a critical vulnerability that can be easily exploited by malicious actors. Part of the company\u2019s Oracle Fusion Middleware offering, Identity Manager is an enterprise identity management system that automatically manages user access privileges [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"nf_dc_page":"","_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[210,88,6],"tags":[9,1362,1353],"class_list":["post-5797","post","type-post","status-publish","format-standard","hentry","category-cloud-2","category-identity-space","category-news","tag-iam","tag-oim","tag-oracle"],"jetpack_featured_media_url":"","jetpack_shortlink":"https:\/\/wp.me\/p25vfy-1vv","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/allidm.com\/blog\/wp-json\/wp\/v2\/posts\/5797","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/allidm.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/allidm.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/allidm.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/allidm.com\/blog\/wp-json\/wp\/v2\/comments?post=5797"}],"version-history":[{"count":1,"href":"https:\/\/allidm.com\/blog\/wp-json\/wp\/v2\/posts\/5797\/revisions"}],"predecessor-version":[{"id":5798,"href":"https:\/\/allidm.com\/blog\/wp-json\/wp\/v2\/posts\/5797\/revisions\/5798"}],"wp:attachment":[{"href":"https:\/\/allidm.com\/blog\/wp-json\/wp\/v2\/media?parent=5797"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/allidm.com\/blog\/wp-json\/wp\/v2\/categories?post=5797"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/allidm.com\/blog\/wp-json\/wp\/v2\/tags?post=5797"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}