PT-2017-11061 · Oracle · Oracle Sun Systems Products Suite

Published 2017-08-08 · Updated 2019-10-03 · CVE-2017-10062

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Oracle Sun Systems Products Suite version 10

Description The issue allows a low-privileged attacker with logon access to the infrastructure to compromise the system. Successful attacks can result in unauthorized access to data, including update, insert, or delete access to some data, as well as unauthorized read access to a subset of data. Additionally, attacks can cause a partial denial of service.

Recommendations For version 10, update to a version that includes the fix for this issue to prevent exploitation.

Fix

Related Identifiers

CVE-2017-10062

Affected Products

Oracle Sun Systems Products Suite

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2017-10062 · Security Note
• https://osv.dev/vulnerability/CVE-2017-10062 · Vendor Advisory
• http://oracle.com/technetwork/security-advisory/cpujul2017-3236622.html · Vendor Advisory
• http://securityfocus.com/bid/99845 · Note
• http://securitytracker.com/id/1038938 · Note