Vulnerability in Oracle ZFS Storage Appliance Kit by Oracle Systems
CVE-2021-2147
1.8LOW
Key Information:
- Vendor
- Oracle
- Vendor
- CVE Published:
- 22 April 2021
Summary
This vulnerability affects the Oracle ZFS Storage Appliance Kit, allowing an attacker with high privileges and access to the infrastructure to potentially compromise the appliance. Exploitation requires human interaction from another party, making it complex but not impossible. An attacker could gain unauthorized capabilities to update, insert, or delete data accessible through Oracle ZFS Storage Appliance Kit, leading to integrity impacts. This highlights the importance of securing access controls and monitoring user interactions within the system.
Affected Version(s)
Sun ZFS Storage Appliance Kit (AK) Software 8.8
References
CVSS V3.1
Score:
1.8
Severity:
LOW
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
High
User Interaction:
Required
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved