CVE-2016-5525

概要

参考情報

• oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html · Patch
• securityfocus.com/bid/93753
• securitytracker.com/id/1037048

solaris cluster のその他の脆弱性

• CVE-2020-6950中 6.5Directory traversal in Eclipse Mojarra before 2.3.14 allows attackers to read arbitrary files via the loc parameter or con parameter.
• CVE-2021-29425中 4.8In Apache Commons IO before 2.7, When invoking the method FileNameUtils.normalize with an improper input string, like "//../foo", or "\\..\f…
• CVE-2019-17195緊急 9.8Connect2id Nimbus JOSE+JWT before v7.9 can throw various uncaught exceptions while parsing a JWT, which could result in an application crash…
• CVE-2019-10086高 7.3In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access…
• CVE-2018-2930緊急 9.8Vulnerability in the Solaris Cluster component of Oracle Sun Systems Products Suite (subcomponent: NAS device addition). Supported versions …