Data Store Vulnerability in Oracle Berkeley DB
CVE-2017-3607

7HIGH

Key Information:

Vendor
Oracle
Status
Oracle Berkeley Db
Vendor
CVE Published:
24 April 2017

Summary

A vulnerability exists in the Data Store component of Oracle Berkeley DB that allows an unauthenticated attacker with access to the infrastructure to compromise the Data Store. This vulnerability requires human interaction from a different user to successfully exploit. If exploited, it can lead to a complete takeover of the Data Store, impacting its confidentiality, integrity, and availability.

Affected Version(s)

Oracle Berkeley DB < 6.2.32

References

http://www.oracle.com/technetwork/security-advisory/cpuap...
x_refsource_CONFIRM
http://www.securityfocus.com/bid/97855
vdb-entryx_refsource_BID

CVSS V3.1

Score:
7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.