Privilege Escalation Vulnerability in Oracle ZFS Storage Appliance Kit
CVE-2022-21513

8.2HIGH

Key Information:

Vendor
Oracle
Status
Sun Zfs Storage Appliance Kit (ak) Software
Vendor
CVE Published:
19 July 2022

Summary

A vulnerability exists in the Oracle ZFS Storage Appliance Kit that allows a high-privileged attacker who has logged into the infrastructure to compromise the system. This vulnerability may lead to unauthorized access and control over the appliance, potentially impacting its confidentiality, integrity, and availability. Given its exploitation potential, organizations utilizing this product are strongly recommended to apply security patches and continuously monitor their environments for unauthorized activities.

Affected Version(s)

Sun ZFS Storage Appliance Kit (AK) Software 8.8

References

https://www.oracle.com/security-alerts/cpujul2022.html
x_refsource_MISC

CVSS V3.1

Score:
8.2
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.