Local Privilege Escalation Vulnerability in Oracle Solaris by Oracle Systems
CVE-2023-21948

7.8HIGH

Key Information:

Vendor

Oracle
Status
Solaris Operating System
Vendor
CVE Published:
18 April 2023

What is CVE-2023-21948?

This vulnerability in Oracle Solaris allows an attacker with low privileges to gain unauthorized access and potentially take over the system. When executed, it can compromise confidentiality, integrity, and availability of the affected environment. It underscores the necessity for proper security measures and timely updates to protect sensitive infrastructures from exploitation.

Affected Version(s)

Solaris Operating System 10

References

https://www.oracle.com/security-alerts/cpuapr2023.html
vendor-advisory

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.