Vulnerability in Oracle ZFS Storage Appliance Kit by Oracle Systems

CVE-2021-1999

What is CVE-2021-1999?

A vulnerability has been identified in the Oracle ZFS Storage Appliance Kit associated with the RAS subsystems. This vulnerability allows an attacker with high privileges, who has logged onto the infrastructure where the appliance runs, to potentially compromise the system. Successful exploitation requires human interaction from another individual, making the attack vector particularly intricate. While the core vulnerability lies within the Oracle ZFS Storage Appliance Kit, the ramifications of an attack could extend to other connected products, leading to unauthorized creation, deletion, or modification of critical data accessible by the appliance.

References