PT-2010-4945 · Oracle · Oracle Vm

Publicado 2010-10-14 · Atualizado 2018-10-10 · CVE-2010-3584

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:L/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Oracle VM version 2.2.1

Description The issue affects confidentiality, integrity, and availability. It is related to the ovs-agent in Oracle VM. There are claims from a third-party researcher that this issue might be related to the storage of passwords and password hashes in cleartext in files with insecure permissions.

Recommendations For Oracle VM version 2.2.1, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2010-3584

Produtos afetados

Oracle Vm

Referências · 4

• http://oracle.com/technetwork/topics/security/cpuoct2010-175626.html · Aviso do Fabricante
• http://securityfocus.com/archive/1/514612/100/0/threaded · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2010-3584 · Nota de Segurança
• http://us-cert.gov/cas/techalerts/TA10-287A.html · Nota