CVE-2021-38475

Description

The database connection to the server is performed by calling a specific API, which could allow an unprivileged user to gain SYSDBA permissions.

Affected Platforms

Weakness Type

CWE-732, NVD-CWE-noinfo

References

• https://us-cert.cisa.gov/ics/advisories/icsa-21-292-01
• https://us-cert.cisa.gov/ics/advisories/icsa-21-292-01