CVE-2015-4821

Unspecified vulnerability in the Integrated Lights Out Manager (ILOM) component in Oracle Sun Systems Products Suite 3.0, 3.1, and 3.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Web.

CVSS v2.0 9.3 HIGH

9.3^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability : 8.6 / Impact : 10.0

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html
http://www.securitytracker.com/id/1033882

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:oracle:oracle_and_sun_systems_product_suite:3.0:::::::*
	cpe:2.3:a:oracle:oracle_and_sun_systems_product_suite:3.1:::::::*
	cpe:2.3:a:oracle:oracle_and_sun_systems_product_suite:3.2:::::::*

History

No history.

Information

Published : 2015-10-21 21:59

Updated : 2016-12-24 02:59

NVD link : CVE-2015-4821

Mitre link : CVE-2015-4821

CVE.ORG link : CVE-2015-4821

JSON object : View

Products Affected

oracle

oracle_and_sun_systems_product_suite

CWE

NVD-CWE-noinfo

{"id": "CVE-2015-4821", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 9.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "MEDIUM", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2015-10-21T21:59:36.370", "references": [{"url": "http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html", "source": "secalert_us@oracle.com"}, {"url": "http://www.securitytracker.com/id/1033882", "source": "secalert_us@oracle.com"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "Unspecified vulnerability in the Integrated Lights Out Manager (ILOM) component in Oracle Sun Systems Products Suite 3.0, 3.1, and 3.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Web."}, {"lang": "es", "value": "Vulnerabilidad no especificada en el componente Integrated Lights Out Manager (ILOM) en Oracle Sun Systems Products Suite 3.0, 3.1 y 3.2 permite a atacantes remotos afectar a la confidencialidad, integridad y disponibilidad a trav\u00e9s de vectores desconocidos relacionados con Web."}], "lastModified": "2016-12-24T02:59:22.183", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:oracle:oracle_and_sun_systems_product_suite:3.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5D01E29D-0C79-4EE6-BAE2-C69A904E3C2C"}, {"criteria": "cpe:2.3:a:oracle:oracle_and_sun_systems_product_suite:3.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B5A9D616-8233-48A2-9F92-CB3E74A12214"}, {"criteria": "cpe:2.3:a:oracle:oracle_and_sun_systems_product_suite:3.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "74D2628A-4664-47DF-8C1C-8AA570BDAE3E"}], "operator": "OR"}]}], "sourceIdentifier": "secalert_us@oracle.com"}