CVE-2017-10234

High

Published: 08/08/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

Vulnerability in the Solaris Cluster component of Oracle Sun Systems Products Suite, related to NAS device addition. It allows a low privileged attacker with access to the Solaris Cluster infrastructure to compromise the system.

Risk Assessment

An attacker can take over the Solaris Cluster, leading to serious threats to the confidentiality, integrity, and availability of organizational data.

Recommendation

It is recommended to restrict access to the Solaris Cluster infrastructure and implement additional security measures to minimize the risk of exploitation of this vulnerability.

Other vulnerabilities in Solaris Cluster

CVE-2014-4259High
Unspecified vulnerability in the Solaris Cluster component in Oracle Sun Systems Products Suite 3.3 and 4.1 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to system management.

Original NVD description (English source)

Vulnerability in the Solaris Cluster component of Oracle Sun Systems Products Suite (subcomponent: NAS device addition). The supported version that is affected is 4. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Solaris Cluster executes to compromise Solaris Cluster. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Solaris Cluster. CVSS 3.0 Base Score 7.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H).