CVE-2024-20914: Infoleak

Published Jan 16, 2024

Updated

Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: Core). The supported version that is affected is 8.8. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle ZFS Storage Appliance Kit executes to compromise Oracle ZFS Storage Appliance Kit. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle ZFS Storage Appliance Kit accessible data. CVSS 3.1 Base Score 2.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N).

Affected Software

1 affected component

Oracle ZFS Storage Appliance Kit=8.8

Event History

Jan 16, 2024

CVE Published

via MITRE·09:41 PM

Data Sourced

via MITRE·09:41 PM

DescriptionSeverity

Data Sourced

via NVD·10:15 PM

RemedyDescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2024-20914?

CVE-2024-20914 is categorized as an easily exploitable vulnerability that poses a risk to high-privileged attackers.

How do I fix CVE-2024-20914?

To mitigate CVE-2024-20914, users should apply the latest security patches provided by Oracle for the affected version 8.8.

Who is affected by CVE-2024-20914?

Users of Oracle ZFS Storage Appliance Kit version 8.8 are affected by CVE-2024-20914.

What component is involved in CVE-2024-20914?

CVE-2024-20914 involves the Core component of the Oracle ZFS Storage Appliance Kit.

Can CVE-2024-20914 be exploited remotely?

CVE-2024-20914 requires the attacker to have logon access to the infrastructure where the Oracle ZFS Storage Appliance Kit runs, limiting remote exploitability.