CVE-2018-2927: Medium severity oracle storage cloud software appliance vulnerability
Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: HTTP data path subsystems). The supported version that is affected is Prior to 8.7.18. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Sun ZFS Storage Appliance Kit (AK). Successful attacks of this vulnerability can result in unauthorized read access to a subset of Sun ZFS Storage Appliance Kit (AK) accessible data. CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2018-2927?
CVE-2018-2927 has a CVSS score indicating it is a high severity vulnerability due to its ease of exploitation.
How do I fix CVE-2018-2927?
To fix CVE-2018-2927, you should upgrade your Sun ZFS Storage Appliance Kit to version 8.7.18 or later.
Who is affected by CVE-2018-2927?
CVE-2018-2927 affects users of the Sun ZFS Storage Appliance Kit running versions prior to 8.7.18.
What type of attacks can exploit CVE-2018-2927?
CVE-2018-2927 can be exploited by low privileged attackers with network access via HTTP.
What components are involved in CVE-2018-2927?
CVE-2018-2927 involves the HTTP data path subsystems of the Sun ZFS Storage Appliance Kit.