Vulnerability in Oracle Cloud Infrastructure Data Science Notebook Sessions
CVE-2021-2138

4.6MEDIUM

Key Information:

Vendor
Oracle
Status
Oracle Cloud Infrastructure Data Science Notebook Sessions
Vendor
CVE Published:
3 March 2021

Summary

This vulnerability in Oracle Cloud Infrastructure Data Science Notebook Sessions allows a low privileged attacker, with network access, to exploit weaknesses in the system. Attackers could gain unauthorized access to data through update, insert, or delete operations, as well as unauthorized read access to accessible data subsets. The flaw emphasizes the importance of securing physical communication segments to ensure data integrity and confidentiality within Oracle's cloud infrastructure.

Affected Version(s)

Oracle Cloud Infrastructure Data Science Notebook Sessions *

References

https://support.oracle.com
x_refsource_MISC

CVSS V3.1

Score:
4.6
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.