CVE-2017-3564
HighSummary
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: RBAC) in version 11.3. Easily exploitable vulnerability allows a low privileged attacker with access to the infrastructure to compromise Solaris.
Risk Assessment
Successful attacks can lead to takeover of Solaris, significantly impacting additional products. Human interaction is required, increasing risk if the attacker has access to the infrastructure.
Recommendation
It is recommended to update Solaris to the latest version and implement additional security measures to restrict infrastructure access to trusted users.
Other vulnerabilities in Solaris (RBAC)
Original NVD description (English source)
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: RBAC). The supported version that is affected is 11.3. Easily "exploitable" vulnerability allows low privileged attacker with logon to the infrastructure where Solaris executes to compromise Solaris. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Solaris, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Solaris. CVSS 3.0 Base Score 8.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H).