PT-2017-8737 · Oracle · Solaris Cluster

Publicado 2017-04-24 · Atualizado 2017-07-11 · CVE-2016-5551

Positive Technologies (AI Summary)

CVSS v3.1

2.8

Baixa

Vetor base

AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Oracle Sun Systems Products Suite versions 4.3

Description The issue allows an unauthenticated attacker with logon to the infrastructure where Solaris Cluster executes to compromise Solaris Cluster, resulting in unauthorized read access to a subset of Solaris Cluster accessible data. Successful attacks require human interaction from a person other than the attacker.

Recommendations For version 4.3, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Access Control

Enumeração de Fraquezas

CWE-284

Identificadores relacionados

CVE-2016-5551

Produtos afetados

Solaris Cluster

Referências · 5

• https://osv.dev/vulnerability/CVE-2016-5551 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2016-5551 · Nota de Segurança
• http://securitytracker.com/id/1038292 · Nota
• http://securityfocus.com/bid/97803 · Nota
• http://oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html · Aviso do Fabricante