Vulnerability in Oracle Sun ZFS Storage Appliance Kit Affects Oracle Sun Systems Products Suite

CVE-2019-2878

What is CVE-2019-2878?

A vulnerability in the Oracle Sun ZFS Storage Appliance Kit allows unauthenticated network access via HTTP, enabling attackers to potentially compromise system data. Although successful exploitation requires user interaction, it can result in unauthorized operations, including updates, inserts, or deletions of accessible data. Moreover, attackers may gain unauthorized read access to specific data, significantly impacting the security of affected systems and potentially other associated products.

References