PT-2018-1384
CVE-2018-2930
·
تاريخ النشر
2018-07-17
·
تاريخ التحديث
2019-10-03
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Oracle Sun Systems Products Suite versions 3.3 and 4.3
Description
The issue is related to inadequate access control in the NAS device addition component of the Solaris Cluster, allowing an unauthenticated attacker with network access via RPC to compromise the Solaris Cluster. Successful exploitation can result in the takeover of the Solaris Cluster.
Recommendations
For version 3.3, update to a fixed version to prevent exploitation.
For version 4.3, update to a fixed version to prevent exploitation.
As a temporary workaround, consider restricting access to the RPC protocol to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾