|CVSS SCORE||5, (AV:N/AC:L/Au:N/C:N/I:N/A:P)|
The specific flaw exists within the GoldenGate mgr process, which listens on TCP port 7809. By default, this process does not require authentication before accepting data delivery and GGSCI commands from a remote machine. This allows for a remote attacker to disable the service or exhaust resources on the target machine.
Oracle has issued an update to correct this vulnerability. More details can be found at:
|CREDIT||Mike Arnold (Bruk0ut)