Data Store Vulnerability in Oracle Berkeley DB
CVE-2017-3615

7HIGH

Key Information:

Vendor
Oracle
Vendor
CVE Published:
24 April 2017

Summary

A vulnerability exists in the Data Store component of Oracle Berkeley DB prior to version 6.2.32, allowing an unauthenticated attacker who has access to the infrastructure running the Data Store to potentially compromise it. Exploitation of this vulnerability necessitates human interaction from a third-party individual. Successful exploitation could result in unauthorized control and access to sensitive data managed by the Data Store, affecting confidentiality, integrity, and availability.

Affected Version(s)

Oracle Berkeley DB < 6.2.32

References

CVSS V3.1

Score:
7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.