漏洞标题
N/A
漏洞描述信息
Oracle存储 gateway 存储云软件 appliances 产品漏洞(组件：管理 Console)。受影响的支持版本是16.3.1.4.2之前。易被利用的漏洞允许通过HTTP网络访问的高特权攻击者 compromising Oracle Storage Cloud Software Appliance。虽然漏洞存在于Oracle Storage Cloud Software Appliance中，但攻击可能会对其他产品产生重大影响。成功利用此漏洞可能会导致未经授权的读取访问访问Oracle Storage Cloud Software Appliance可访问的数据部分。注意：将Oracle Storage Cloud Software Appliance升级到版本16.3.1.4.2或更高版本将解决这些漏洞。从这里下载Oracle Storage Cloud Software Appliance的最新版本：<https://www.oracle.com/downloads/cloud/oscsa-downloads.html>。请参考文档2768897.1以获取更多细节。CVSS 3.1 基础得分4.1(保密影响)。CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N)。
CVSS信息
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N
漏洞类别
N/A
漏洞标题
N/A
漏洞描述信息
Vulnerability in the Oracle Storage Cloud Software Appliance product of Oracle Storage Gateway (component: Management Console). The supported version that is affected is Prior to 16.3.1.4.2. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Storage Cloud Software Appliance. While the vulnerability is in Oracle Storage Cloud Software Appliance, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Storage Cloud Software Appliance accessible data. Note: Updating the Oracle Storage Cloud Software Appliance to version 16.3.1.4.2 or later will address these vulnerabilities. Download the latest version of Oracle Storage Cloud Software Appliance from <a href=" https://www.oracle.com/downloads/cloud/oscsa-downloads.html">here. Refer to Document <a href="https://support.oracle.com/rstype=doc&id=2768897.1">2768897.1 for more details. CVSS 3.1 Base Score 4.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N).
CVSS信息
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N
漏洞类别
N/A
漏洞标题
Oracle Storage Cloud Software Appliance 安全漏洞
漏洞描述信息
Oracle Storage Cloud Software Appliance是美国Oracle公司的一个应用软件。提供一个存储功能 Oracle Storage Cloud Software Appliance Management Console Prior to 16.3.1.4.2 存在安全漏洞，该漏洞允许通过HTTP进行网络访问的高特权攻击者危害Oracle存储云软件设备。
CVSS信息
N/A
漏洞类别
其他