CVE-2018-2930 in Solaris Cluster

Resumen (Inglés)

Vulnerability in the Solaris Cluster component of Oracle Sun Systems Products Suite (subcomponent: NAS device addition). Supported versions that are affected are 3.3 and 4.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via RPC to compromise Solaris Cluster. Successful attacks of this vulnerability can result in takeover of Solaris Cluster. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Reservar

2017-12-15

Divulgación

2018-07-18

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
121853	Oracle Solaris Cluster NAS Device Addition escalada de privilegios	284	No está definido	Arreglo oficial	CVE-2018-2930

Fuentes

• MITRE
• NVD
• CVE Details