CVE-2018-2905

MEDIO 5.3CVE-2018-2905 · Published 18/07/2018 · updated 17/06/2026

In breve

CVE-2018-2905 è una vulnerabilità MEDIO (CVSS 5.3) che riguarda sun zfs storage appliance kit (oracle).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 2.1%, superiore al 81.4% delle vulnerabilità.
Correzione: aggiornare a 8.7.20 o successiva.

Package	Affected versions	Patched versions
sun zfs storage appliance kit oracle	`< 8.7.20`	`8.7.20`

Description

Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: Core Services). The supported version that is affected is Prior to 8.7.20. Easily exploitable vulnerability allows unauthenticated attacker with network access via SSL/TLS to compromise Sun ZFS Storage Appliance Kit (AK). Successful attacks of this vulnerability can result in unauthorized read access to a subset of Sun ZFS Storage Appliance Kit (AK) accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).

References

oracle.com/technetwork/security-advisory/cpujul2018-4258247.html · Patch
securityfocus.com/bid/104842 · Third Party Advisory
securitytracker.com/id/1041303 · Third Party Advisory

Altre vulnerabilità di sun zfs storage appliance kit

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

sun zfs storage appliance kit

oracle

< 8.7.20

8.7.20

Description

Altre vulnerabilità di sun zfs storage appliance kit

Vedi tutto →