Vulnerability in Oracle Berkeley DB Data Store Component
CVE-2017-3604
7HIGH
Summary
The vulnerability exists within the Data Store component of Oracle Berkeley DB prior to version 6.2.32, allowing unauthenticated attackers with access to the infrastructure where the Data Store operates to compromise its security. Although exploiting this vulnerability is challenging, it requires interaction from a user other than the attacker. Successful exploitation can lead to the attacker gaining full control over the Data Store, which may significantly impact the confidentiality, integrity, and availability of the stored data.
Affected Version(s)
Oracle Berkeley DB < 6.2.32
References
CVSS V3.1
Score:
7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved