CVE-2017-3622

Опубликовано: 24 апр. 2017

Источник: nvd

CVSS3: 7.8

CVSS2: 7.2

EPSS Средний

Описание

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Common Desktop Environment (CDE)). The supported version that is affected is 10. Easily "exploitable" vulnerability allows low privileged attacker with logon to the infrastructure where Solaris executes to compromise Solaris. Successful attacks of this vulnerability can result in takeover of Solaris. Note: CVE-2017-3622 is assigned for the "Extremeparr". CVSS 3.0 Base Score 7.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).

Ссылки

http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html
Patch
Vendor Advisory
http://www.securityfocus.com/bid/97774
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1038292
https://www.exploit-db.com/exploits/45479/
http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html
Patch
Vendor Advisory
http://www.securityfocus.com/bid/97774
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1038292
https://www.exploit-db.com/exploits/45479/

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:o:oracle:solaris:10:*:*:*:*:*:*:*

EPSS

Процентиль: 95%

0.19606

Средний

7.8 High

CVSS3

7.2 High

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

GHSA-j6c4-cg47-wc3x

CVSS3: 7.8

github

больше 3 лет назад

BDU:2017-01284

fstec

почти 9 лет назад

Уязвимость компонента Common Desktop Environment операционной системы Solaris, позволяющая нарушителю получить привилегированный доступ к инфраструктуре