PT-2018-15906 · Oracle · Oracle Sun Systems Products Suite

Published 2018-07-18 · Updated 2019-10-03 · CVE-2018-2906

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Oracle Sun Systems Products Suite version 11.3

Description The issue affects the Hardware Management Pack component, specifically the Ipmitool subcomponent. It allows an unauthenticated attacker with network access via IPMI to compromise the Hardware Management Pack, resulting in unauthorized read access to a subset of accessible data.

Recommendations For version 11.3, update to a newer version that contains a fix for this issue, as the current version is affected and can be exploited via IPMI, allowing unauthorized access to certain data.

Fix

Related Identifiers

CVE-2018-2906

Affected Products

Oracle Sun Systems Products Suite

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2018-2906 · Security Note
• https://osv.dev/vulnerability/CVE-2018-2906 · Vendor Advisory
• http://oracle.com/technetwork/security-advisory/cpujul2018-4258247.html · Vendor Advisory
• http://securityfocus.com/bid/104808 · Note
• http://securitytracker.com/id/1041303 · Note