CVE-2017-10194: Infoleak
Vulnerability in the Oracle Integrated Lights Out Manager (ILOM) component of Oracle Sun Systems Products Suite (subcomponent: System Management). The supported version that is affected is Prior to 3.2.6. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Integrated Lights Out Manager (ILOM). Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Integrated Lights Out Manager (ILOM) accessible data. CVSS 3.0 Base Score 2.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N).
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2017-10194?
CVE-2017-10194 is classified as a high-severity vulnerability due to its ease of exploitation by high privileged attackers with network access.
How can I mitigate CVE-2017-10194?
To mitigate CVE-2017-10194, upgrade the Oracle Integrated Lights Out Manager to version 3.2.6 or later.
Who is affected by CVE-2017-10194?
Organizations using Oracle Integrated Lights Out Manager firmware versions prior to 3.2.6 are affected by CVE-2017-10194.
What is the nature of the vulnerability in CVE-2017-10194?
The vulnerability in CVE-2017-10194 involves unauthorized access and potential manipulation via HTTP access by attackers.
Is there a patch available for CVE-2017-10194?
Yes, Oracle has released a patch for CVE-2017-10194 as part of the firmware update to version 3.2.6.