CVE-2017-10194 in Integrated Lights Out Manager

Resumen (Inglés)

Vulnerability in the Oracle Integrated Lights Out Manager (ILOM) component of Oracle Sun Systems Products Suite (subcomponent: System Management). The supported version that is affected is Prior to 3.2.6. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Integrated Lights Out Manager (ILOM). Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Integrated Lights Out Manager (ILOM) accessible data. CVSS 3.0 Base Score 2.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N).

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Reservar

2017-06-21

Divulgación

2017-10-19

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
108242	Oracle Integrated Lights Out Manager System Management divulgación de información	200	No está definido	Arreglo oficial	CVE-2017-10194

Fuentes

• MITRE
• NVD
• CVE Details