CVE-2021-2147: Low severity oracle sun zfs storage appliance kit vulnerability

Published Apr 22, 2021

Updated

Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: Installation). The supported version that is affected is 8.8. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle ZFS Storage Appliance Kit executes to compromise Oracle ZFS Storage Appliance Kit. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle ZFS Storage Appliance Kit accessible data. CVSS 3.1 Base Score 1.8 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:N/I:L/A:N).

Affected Software

1 affected component

Oracle ZFS Storage Appliance=8.8

Remediation

Patch Available

https://www.oracle.com/security-alerts/cpuapr2021.html

Event History

Apr 22, 2021

CVE Published

via MITRE·09:53 PM

Data Sourced

via MITRE·09:53 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the vulnerability ID for the Oracle ZFS Storage Appliance Kit vulnerability?

The vulnerability ID for the Oracle ZFS Storage Appliance Kit vulnerability is CVE-2021-2147.

What is the affected software for CVE-2021-2147?

The affected software for CVE-2021-2147 is Oracle ZFS Storage Appliance version 8.8.

What is the severity level of CVE-2021-2147?

The severity level of CVE-2021-2147 is low.

How can the Oracle ZFS Storage Appliance Kit vulnerability be exploited?

The Oracle ZFS Storage Appliance Kit vulnerability can be exploited by a high privileged attacker with logon access to the infrastructure.

Where can I find more information about CVE-2021-2147?

You can find more information about CVE-2021-2147 on the Oracle Security Alerts website: https://www.oracle.com/security-alerts/cpuapr2021.html