PT-2019-1222 · Sun · Sun Zfs Storage Appliance Kit

Publicado 2019-01-14 · Atualizado 2020-08-24 · CVE-2019-2412

Positive Technologies (AI Summary)

CVSS v3.1

6.4

Média

Vetor base

AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Sun ZFS Storage Appliance Kit (AK) versions prior to 8.8.2

Description The issue is related to inadequate access control in the Object Store component of the Sun ZFS Storage Appliance Kit (AK), allowing a highly privileged attacker with logon access to the infrastructure to compromise the Sun ZFS Storage Appliance Kit (AK). Successful exploitation can result in the takeover of the Sun ZFS Storage Appliance Kit (AK).

Recommendations For versions prior to 8.8.2, update to version 8.8.2 or later to resolve the issue. As a temporary workaround, consider restricting access to the Object Store component to minimize the risk of exploitation.

Correção

Improper Access Control

Enumeração de Fraquezas

CWE-284

Identificadores relacionados

BDU:2019-00335

CVE-2019-2412

Produtos afetados

Sun Zfs Storage Appliance Kit

Referências · 6

• https://oracle.com/technetwork/security-advisory/cpujan2019-5072801.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-2412 · Nota de Segurança
• https://bdu.fstec.ru/vul/2019-00335 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-2412 · Aviso do Fabricante
• http://oracle.com/technetwork/security-advisory/cpujan2019-5072801.html · Aviso do Fabricante
• http://securityfocus.com/bid/106595 · Nota