CVE-2019-2543 in Solaris

Riassunto

di MITRE

Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows unauthenticated attacker with network access via KSSL to compromise Oracle Solaris. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Solaris accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Prenotare: 14/12/2018
• Divulgazione: 16/01/2019
• Moderazione: accettato
• Voce: VDB-129696
• CPE: pronto
• CWE: CWE-200 (confermato)
• CVSS: 5.3 (NVD)
• EPSS: 0.01571
• KEV: no
• Attività: molto basso
• Settore: Pharma, Hospital, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2019-2543
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2019-2543
• CVE Details: https://www.cvedetails.com/cve/CVE-2019-2543/