8.8
Élevée
Exploitée
CVE-2019-3010 Oracle Solaris Privilege Escalation Vulnerability
Exploitation active constatée
· catalogue CISA KEV
Action attendue
Apply updates per vendor instructions.
Campagnes de rançongiciel
Non constatée à ce jour
Description
Vulnerability in the Oracle Solaris product of Oracle Systems (component: XScreenSaver). The supported version that is affected is 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. While the vulnerability is in Oracle Solaris, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle Solaris. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Solaris Operating System | 11 | Pas de correctif indiqué |
Références
- www.oracle.com www.oracle.com
- 20191018 CVE-2019-3010 - Local privilege escalation on Solaris 11.x via xscreensaver seclists.org
- packetstormsecurity.com packetstormsecurity.com
Chronologie
- Publiée
- Ajoutée au catalogue KEV
- Dernière modification
Autres CVE de Solaris Operating System
Les 136 CVE de Solaris Operating System →
CVE-2024-21151
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystem)
3.3
Faible
CVE-2024-21105
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility)
2.0
Faible
CVE-2024-21059
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility)
7.8
Élevée
CVE-2024-20999
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Zones)
8.2
Élevée