Privilege Escalation Vulnerability in Oracle ZFS Storage Appliance Kit

CVE-2022-21513

What is CVE-2022-21513?

A vulnerability exists in the Oracle ZFS Storage Appliance Kit that allows a high-privileged attacker who has logged into the infrastructure to compromise the system. This vulnerability may lead to unauthorized access and control over the appliance, potentially impacting its confidentiality, integrity, and availability. Given its exploitation potential, organizations utilizing this product are strongly recommended to apply security patches and continuously monitor their environments for unauthorized activities.

References