Low-privilege data modification, disclosure, and service interruption

Improper privilege management in Oracle Outside In Technology 8.5.6 and 8.5.7 allows local users to alter or read data and interrupt service. Oracle identifies Outside In Core but has not published the flawed function, input, or privilege check that permits the unauthorized operations. Exploitation requires low-privilege logon access to the host where Outside In executes and is limited to some data, a subset of readable data, and partial service interruption.