PT-2017-11061
CVE-2017-10062
·
Published
2017-08-08
·
Updated
2019-10-03
Description by
CVSS 3.1
5.3
MediumMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Name of the Vulnerable Software and Affected Versions
Oracle Sun Systems Products Suite version 10
Description
The issue allows a low-privileged attacker with logon access to the infrastructure to compromise the system. Successful attacks can result in unauthorized access to data, including update, insert, or delete access to some data, as well as unauthorized read access to a subset of data. Additionally, attacks can cause a partial denial of service.
Recommendations
For version 10, update to a version that includes the fix for this issue to prevent exploitation.
Found an issue in the description? Have something to add? Feel free to write us 👾