Data Store Vulnerability in Oracle Berkeley DB
CVE-2017-3605

7HIGH

Key Information:

Vendor
Oracle
Vendor
CVE Published:
24 April 2017

Summary

A vulnerability exists in the Data Store component of Oracle Berkeley DB, specifically affecting versions prior to 6.2.32. This issue allows an unauthenticated attacker with access to the infrastructure where the Data Store operates to potentially compromise it. Exploitation of this vulnerability necessitates human interaction from a user other than the attacker. Should the attack prove successful, it could lead to the takeover of the Data Store, risking the confidentiality, integrity, and availability of the data stored within.

Affected Version(s)

Oracle Berkeley DB < 6.2.32

References

CVSS V3.1

Score:
7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.