Vulnerability in Oracle Hardware Management Pack
CVE-2018-2906
Vulnerability in the Hardware Management Pack component of Oracle Sun Systems Products Suite (subcomponent: Ipmitool). The supported version that is affected is 11.3. Difficult to exploit vulnerability allows unauthenticated attacker with network access via IPMI to compromise Hardware Management Pack. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Hardware Management Pack accessible data. CVSS 3.0 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).
Published · last modified .
CVSS v3 metric
CVSS v3 base score 3.7 (Low). Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N.
EPSS exploit prediction
EPSS: 0.016 (75.5th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 76th percentile — 75.5% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.016 · newest: 0.016 · change: +0.000
Affected products
- Oracle Hardware Management Pack — versions 11.3
- Oracle Corporation Ssm - (Ssm Host Apps) Hmp: Hardware Management Pack — versions 11.3
References
- www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html (Patch, Vendor Advisory)
- www.securitytracker.com/id/1041303 (VDB Entry, Third Party Advisory, vdb-entry)
- www.securityfocus.com/bid/104808 (VDB Entry, Third Party Advisory, vdb-entry)
Frequently asked questions
- What is CVE-2018-2906?
- CVE-2018-2906 is a low-severity vulnerability in Oracle Hardware Management Pack. CVSS score: 3.7/10. Published 2018-07-18.
- How severe is CVE-2018-2906?
- Low severity. CVSS v3 base score is 3.7 out of 10.