8.8
Élevée
CVE-2020-2696 Vulnerability in the Oracle Solaris product of Oracle Systems (component: Common Desktop Environment)
Description
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Common Desktop Environment). The supported version that is affected is 10. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. While the vulnerability is in Oracle Solaris, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle Solaris. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Solaris Operating System | 10 | Pas de correctif indiqué |
Références
- www.oracle.com www.oracle.com
- packetstormsecurity.com packetstormsecurity.com
- 20200117 CVE-2020-2696 - Local privilege escalation via CDE dtsession seclists.org
- packetstormsecurity.com packetstormsecurity.com
- 20200117 CVE-2020-2696 - Local privilege escalation via CDE dtsession seclists.org
- [oss-security] 20200120 CVE-2020-2656, CVE-2020-2696 - Multiple vulnerabilities in Oracle Solaris www.openwall.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Solaris Operating System
Les 136 CVE de Solaris Operating System →
CVE-2024-21151
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystem)
3.3
Faible
CVE-2024-21105
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility)
2.0
Faible
CVE-2024-21059
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility)
7.8
Élevée
CVE-2024-20999
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Zones)
8.2
Élevée