Vulnerability in Oracle ZFS Storage Appliance Kit by Oracle Systems

CVE-2022-21563

What is CVE-2022-21563?

This vulnerability allows an attacker with high privileges who has logged into the infrastructure where the Oracle ZFS Storage Appliance Kit operates to compromise the appliance. Such exploitation can lead to unauthorized updates, insertions, or deletions of critical data, as well as the potential to partially disrupt the service of the appliance. The risk stems from insufficient protection mechanisms within the system, which can be targeted, thus exposing sensitive data to unauthorized manipulation and creating vulnerabilities within the service availability.

References