Unauthenticated local takeover after user interaction

A vulnerability in Outside In Core in Oracle Outside In Technology 8.5.8 allows local users to take over the application via user-assisted local access. Oracle has not disclosed the flawed function, parser, or input path in Outside In Core, and the public record names only the component, affected version, and resulting application compromise. Exploitation requires logon access to the host and interaction from another person, limiting exposure to workflows where an attacker can induce a local operator to invoke the vulnerable component on attacker-supplied input.