CVE-2018-3275 in Solaris

Resumen (Inglés)

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: LibKMIP). The supported version that is affected is 11.3. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Solaris. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Solaris accessible data as well as unauthorized access to critical data or complete access to all Solaris accessible data. CVSS 3.0 Base Score 7.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Reservar

2017-12-15

Divulgación

2018-10-16

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
125631	Oracle Solaris LibKMIP escalada de privilegios	284	No está definido	Arreglo oficial	CVE-2018-3275

Fuentes

• MITRE
• NVD
• CVE Details