Login Sign Up

CVE-2021-2267

8.1 HIGH

📋 TL;DR

This vulnerability in Oracle Labor Distribution allows authenticated attackers with low privileges to perform unauthorized data manipulation and access via HTTP. It affects Oracle E-Business Suite versions 12.1.1 through 12.1.3. Attackers can create, delete, or modify critical data, potentially compromising the integrity and confidentiality of the Labor Distribution module.

💻 Affected Systems

Products:
  • Oracle E-Business Suite
Versions: 12.1.1 through 12.1.3
Operating Systems: All platforms running Oracle E-Business Suite
Default Config Vulnerable: ⚠️ Yes
Notes: Affects the Labor Distribution component specifically. Requires network access via HTTP and low privileged user account.

📦 What is this software?

Labor Distribution by Oracle

View all CVEs affecting Labor Distribution →

⚠️ Risk & Real-World Impact

🔴

Worst Case

Complete compromise of Oracle Labor Distribution data, including unauthorized access to all sensitive information and ability to manipulate critical business data, potentially disrupting payroll and workforce management operations.

🟠

Likely Case

Unauthorized data modification or access by authenticated users with low privileges, leading to data integrity issues or unauthorized viewing of sensitive labor distribution information.

🟢

If Mitigated

Limited impact with proper network segmentation, strong authentication controls, and monitoring in place, though the vulnerability would still exist.

🌐 Internet-Facing: HIGH
🏢 Internal Only: HIGH

🎯 Exploit Status

Public PoC: ✅ No
Weaponized: UNKNOWN
Unauthenticated Exploit: ✅ No
Complexity: LOW

Requires authenticated access but with low privileges. CVSS indicates 'easily exploitable' with network access via HTTP.

🛠️ Fix & Mitigation

✅ Official Fix

Patch Version: Apply Oracle Critical Patch Update for April 2021 or later

Vendor Advisory: https://www.oracle.com/security-alerts/cpuapr2021.html

Restart Required: Yes

Instructions:

1. Download the appropriate patch from Oracle Support. 2. Apply the patch following Oracle's E-Business Suite patching procedures. 3. Restart affected services. 4. Test functionality after patching.

🔧 Temporary Workarounds

Network Segmentation

all

Restrict network access to Oracle E-Business Suite to only trusted IP addresses and networks.

Privilege Reduction

all

Review and minimize user privileges in Oracle Labor Distribution, applying principle of least privilege.

🧯 If You Can't Patch

  • Implement strict network access controls to limit HTTP access to Oracle E-Business Suite
  • Enhance monitoring and logging of Oracle Labor Distribution module activities

🔍 How to Verify

Check if Vulnerable:

Check Oracle E-Business Suite version and verify if it's between 12.1.1 and 12.1.3. Review patch history for April 2021 CPU.

Check Version:

Check Oracle E-Business Suite version through application administration interface or database queries specific to your implementation.

Verify Fix Applied:

Verify that the April 2021 Critical Patch Update has been applied successfully and test Labor Distribution functionality.

📡 Detection & Monitoring

Log Indicators:

  • Unusual data modification patterns in Labor Distribution
  • Multiple failed authentication attempts followed by successful low-privilege access
  • Unexpected data access from low-privilege accounts

Network Indicators:

  • HTTP requests to Labor Distribution endpoints from unusual sources
  • Patterns of data manipulation requests

SIEM Query:

source="oracle-ebs" AND (event_type="data_modification" OR event_type="unauthorized_access") AND component="labor_distribution"

📊 Metadata

CVE ID: CVE-2021-2267
CVSS v3 Score: 8.1 (HIGH)
CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Published: April 22, 2021
Last Updated: November 21, 2024

🔗 References

📤 Share & Export

📄 Export Markdown 📋 Export JSON