CVE-2018-2905

MEDIUM 5.3CVE-2018-2905 · Published 18/07/2018 · updated 17/06/2026

In short

CVE-2018-2905 is a MEDIUM (CVSS 5.3) vulnerability affecting sun zfs storage appliance kit (oracle).
Chance of exploitation in the next 30 days (EPSS): 2.1%, higher than 81.4% of all vulnerabilities.
Fix: update to 8.7.20 or later.

Package	Affected versions	Patched versions
sun zfs storage appliance kit oracle	`< 8.7.20`	`8.7.20`

Description

Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: Core Services). The supported version that is affected is Prior to 8.7.20. Easily exploitable vulnerability allows unauthenticated attacker with network access via SSL/TLS to compromise Sun ZFS Storage Appliance Kit (AK). Successful attacks of this vulnerability can result in unauthorized read access to a subset of Sun ZFS Storage Appliance Kit (AK) accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).

References

oracle.com/technetwork/security-advisory/cpujul2018-4258247.html · Patch
securityfocus.com/bid/104842 · Third Party Advisory
securitytracker.com/id/1041303 · Third Party Advisory

More vulnerabilities in sun zfs storage appliance kit

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

sun zfs storage appliance kit

oracle

< 8.7.20

8.7.20

Description

More vulnerabilities in sun zfs storage appliance kit

See all →