CVE-2019-3010 - Vulnerability in the Oracle Solaris product of Oracle Systems (component: XScreenSaver). The support

CVE-2019-3010

Summary

Vulnerability in the Oracle Solaris product of Oracle Systems (component: XScreenSaver). The supported version that is affected is 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. While the vulnerability is in Oracle Solaris, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle Solaris. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).

References

Vulnerable Configurations

cpe:2.3:o:oracle:solaris:11:*:*:*:*:*:*:*
cpe:2.3:o:oracle:solaris:11:*:*:*:*:*:*:*

CVSS

Base:	4.6 (as of 31-01-2023 - 19:05)
Impact:
Exploitability:

CWE

NVD-CWE-noinfo

CAPEC

Access

Vector	Complexity	Authentication
LOCAL	LOW	NONE

Impact

Confidentiality	Integrity	Availability
PARTIAL	PARTIAL	PARTIAL

cvss-vector via4

AV:L/AC:L/Au:N/C:P/I:P/A:P

refmap via4

fulldisc	20191018 CVE-2019-3010 - Local privilege escalation on Solaris 11.x via xscreensaver
misc	http://packetstormsecurity.com/files/154960/Solaris-xscreensaver-Privilege-Escalation.html http://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html

Last major update

31-01-2023 - 19:05

Published

16-10-2019 - 18:15

Last modified

31-01-2023 - 19:05