PT-2022-2025 · Oracle · Oracle Solaris

Published 2022-01-19 · Updated 2022-01-22 · CVE-2022-21263

Positive Technologies (AI Summary)

CVSS v2.0

6.0

Medium

Base vector

AV:N/AC:M/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Oracle Solaris version 11

Description The issue is related to the Fault Management Architecture component of Oracle Solaris. It allows a low-privileged attacker with logon access to the infrastructure to compromise Oracle Solaris. Successful attacks require human interaction from a person other than the attacker and can result in unauthorized access to data, including update, insert, or delete access, as well as unauthorized read access. Additionally, it can cause a partial denial of service.

Recommendations For Oracle Solaris version 11, there is no information about a newer version that contains a fix for this issue.

Fix

Weakness Enumeration

CWE-17

Related Identifiers

BDU:2022-01621

CVE-2022-21263

Affected Products

Oracle Solaris

References · 5

• https://osv.dev/vulnerability/CVE-2022-21263 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-21263 · Security Note
• https://oracle.com/security-alerts/cpujan2022.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-01621 · Security Note
• https://t.me/cibsecurity/35799 · Telegram Post