Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). The supported version that is affected is 11.3. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Solaris executes to compromise Solaris. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Solaris, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Solaris. CVSS 3.0 Base Score 7.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H).

This Solaris system is missing necessary patches to address critical security updates :

  - Vulnerability in the Solaris component of Oracle Sun     Systems Products Suite (subcomponent: Kernel). The     supported version that is affected is 11.3. Difficult to     exploit vulnerability allows high privileged attacker     with logon to the infrastructure where Solaris executes     to compromise Solaris. Successful attacks require human     interaction from a person other than the attacker and     while the vulnerability is in Solaris, attacks may     significantly impact additional products. Successful     attacks of this vulnerability can result in unauthorized     access to critical data or complete access to all     Solaris accessible data. (CVE-2018-2560)

  - Vulnerability in the Solaris component of Oracle Sun     Systems Products Suite (subcomponent: Kernel). The     supported version that is affected is 11.3. Easily     exploitable vulnerability allows low privileged attacker     with logon to the infrastructure where Solaris executes     to compromise Solaris. Successful attacks of this     vulnerability can result in unauthorized access to     critical data or complete access to all Solaris     accessible data. (CVE-2018-2577)

  - Vulnerability in the Solaris component of Oracle Sun     Systems Products Suite (subcomponent: Kernel). The     supported version that is affected is 11.3. Difficult to     exploit vulnerability allows high privileged attacker     with logon to the infrastructure where Solaris executes     to compromise Solaris. Successful attacks require human     interaction from a person other than the attacker and     while the vulnerability is in Solaris, attacks may     significantly impact additional products. Successful     attacks of this vulnerability can result in takeover of     Solaris. (CVE-2018-2578)

Detections

Analytics

CVE-2018-2578

high

Tenable Plugins

high