Security Vulnerability in Oracle Berkeley DB Data Store Component

CVE-2019-2871

What is CVE-2019-2871?

A vulnerability exists within the Data Store component of Oracle Berkeley DB that may allow an unauthenticated attacker to exploit the system if they have access to the logon infrastructure where Data Store operates. While the attack requires human interaction by someone other than the attacker, it can ultimately lead to the compromise of Data Store functionality. Affected versions include multiple releases, each presenting various risks to data confidentiality, integrity, and availability.

References