CVE-2018-2937: Medium severity oracle storage cloud software appliance vulnerability
Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: User Interface). The supported version that is affected is Prior to 8.7.19. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Sun ZFS Storage Appliance Kit (AK). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Sun ZFS Storage Appliance Kit (AK) accessible data. CVSS 3.0 Base Score 5.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N).
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2018-2937?
CVE-2018-2937 has a high severity rating due to its potential for exploitation by unauthenticated attackers.
How do I fix CVE-2018-2937?
To fix CVE-2018-2937, upgrade to version 8.7.19 or later of the Oracle Sun ZFS Storage Appliance Kit.
What type of vulnerability is CVE-2018-2937?
CVE-2018-2937 is an easily exploitable vulnerability allowing unauthorized access through the user interface.
Who is affected by CVE-2018-2937?
Organizations using the Oracle Sun ZFS Storage Appliance Kit prior to version 8.7.19 are affected by CVE-2018-2937.
What component of the Oracle Sun Systems Products Suite does CVE-2018-2937 affect?
CVE-2018-2937 affects the User Interface component of the Sun ZFS Storage Appliance Kit.