Lucene search

OracleCVE-2016-5525

HistoryOct 25, 2016 - 2:30 p.m.

CVE-2016-5525

2016-10-2514:30:01

CWE-284

CWE-254

oracle

web.nvd.nist.gov

cve-2016-5525

unspecified vulnerability

solaris cluster

oracle

sun systems

integrity

local users

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

CVSS3

3.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

AI Score

4.1

Confidence

Low

EPSS

Percentile

9.7%

JSON

Unspecified vulnerability in the Solaris Cluster component in Oracle Sun Systems Products Suite 3.3 and 4.3 allows local users to affect integrity via vectors related to Cluster check files.

Affected configurations

Nvd

Node

oraclesolaris_clusterMatch3.3

oraclesolaris_clusterMatch4.3

VendorProductVersionCPE
oraclesolaris_cluster3.3cpe:2.3:a:oracle:solaris_cluster:3.3:*:*:*:*:*:*:*
oraclesolaris_cluster4.3cpe:2.3:a:oracle:solaris_cluster:4.3:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
oracle	solaris_cluster	3.3	cpe:2.3:a:oracle:solaris_cluster:3.3:::::::*
oracle	solaris_cluster	4.3	cpe:2.3:a:oracle:solaris_cluster:4.3:::::::*

References

www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html

www.securityfocus.com/bid/93753

www.securitytracker.com/id/1037048

Social References

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

CVSS3

3.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

AI Score

4.1

Confidence

Low

EPSS

Percentile

9.7%

JSON

Related for CVE-2016-5525