PT-2018-15906 · Oracle · Oracle Sun Systems Products Suite

Publicado 2018-07-18 · Atualizado 2019-10-03 · CVE-2018-2906

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Oracle Sun Systems Products Suite version 11.3

Description The issue affects the Hardware Management Pack component, specifically the Ipmitool subcomponent. It allows an unauthenticated attacker with network access via IPMI to compromise the Hardware Management Pack, resulting in unauthorized read access to a subset of accessible data.

Recommendations For version 11.3, update to a newer version that contains a fix for this issue, as the current version is affected and can be exploited via IPMI, allowing unauthorized access to certain data.

Correção

Identificadores relacionados

CVE-2018-2906

Produtos afetados

Oracle Sun Systems Products Suite

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2018-2906 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-2906 · Aviso do Fabricante
• http://oracle.com/technetwork/security-advisory/cpujul2018-4258247.html · Aviso do Fabricante
• http://securityfocus.com/bid/104808 · Nota
• http://securitytracker.com/id/1041303 · Nota