Oracle ZFS Storage Appliance Kit Vulnerability Allows Low Privileged Attackers to Compromise Data

CVE-2023-21833

What is CVE-2023-21833?

A vulnerability has been identified in the Object Store component of the Oracle ZFS Storage Appliance Kit. This flaw allows a low privileged attacker with network access via HTTP to exploit the system. Successful exploitation can lead to unauthorized read access to sensitive data within the Oracle ZFS Storage Appliance Kit, compromising data confidentiality. It is essential for users to assess their security measures to mitigate the potential risks associated with this vulnerability.

References