First published: Wed Jan 21 2015(Updated: )
Unspecified vulnerability in the Integrated Lights Out Manager (ILOM) component in Oracle Sun Systems Products Suite ILOM prior to 3.2.4 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to IPMI.
Credit: secalert_us@oracle.com
Affected Software | Affected Version | How to fix |
---|---|---|
oracle integrated lights out manager firmware | <=3.2.3 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2015-0424 is considered a moderate severity vulnerability affecting Oracle ILOM that allows potential impacts on confidentiality, integrity, and availability.
To mitigate CVE-2015-0424, upgrade the Integrated Lights Out Manager firmware to version 3.2.4 or later.
CVE-2015-0424 affects remote authenticated users of Oracle Sun Systems Products Suite ILOM prior to version 3.2.4.
CVE-2015-0424 involves vectors related to IPMI, which can affect the system's security and functionality.
Yes, Oracle has released a patch that can be applied by updating the affected ILOM firmware to the latest version.