Oracle Corporation Solaris Operating System

CVE-2019-2788
MEDIUM 6.3

At a glance

Source
NVD
EPSS
EPSS 0.39 % · percentile 33 ()
State
PUBLISHED
Published
Updated
Assigner
oracle
NVD status
Modified

Description

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Open Fabrics Tools). The supported version that is affected is 11.4. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Solaris executes to compromise Solaris. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Solaris accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Solaris. CVSS 3.0 Base Score 6.3 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:H).

References

Scores

VersionScoreVectorScored by
CVSS 3.0MEDIUM 6.3CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:HNVD · nvd@nist.gov (Primary)
CVSS 2.0LOW 2.6AV:L/AC:H/Au:N/C:N/I:P/A:PNVD · nvd@nist.gov (Primary)

European references

CERT-FR advisories

Affected configurations (NVD CPE)

Affected products

ProductVersions
Oracle Corporation · Solaris Operating Systemaffected 11.4

Sources

SourceLicence
CVE List (CVEProject cvelistV5)CVE Program Terms of Use
EPSS (FIRST.org)FIRST — attribution requested
ENISA EUVDENISA — reproduction authorised, source acknowledged
CERT-FR (ANSSI)Licence Ouverte / Etalab 2.0
NVD (NIST) via fkie-cad/nvd-json-data-feedsPublic domain — this product uses data from the NVD API but is not endorsed or certified by the NVD