Description
Unspecified vulnerability in the JD Edwards EnterpriseOne Tools component in Oracle JD Edwards Products 9.1 and 9.2 allows remote attackers to affect availability via vectors related to Enterprise Infrastructure SEC, a different vulnerability than CVE-2016-0424.
References
- 1034722 vdb-entry
- http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html
- https://www.onapsis.com/research/security-advisories/jd-edwards-jdenet-password-disclosure
- 20160825 Onapsis Security Advisory ONAPSIS-2016-009: JD Edwards JDENet Password Disclosure mailing-list
- http://packetstormsecurity.com/files/138507/JD-Edwards-9.1-EnterpriseOne-Server-JDENet-Password-Disclosure.html