Usu Oracle Optimization
4 CVEs affecting Usu Oracle Optimization. Latest disclosed: 2022-04-29. Critical: 0, High: 4.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-29937 | High | 8.8 | 2022-04-29 | USU Oracle Optimization before 5.17.5 allows authenticated DataCollection users to achieve agent root access because some common OS commands are blocked but (f… |
CVE-2022-29936 | High | 8.8 | 2022-04-29 | USU Oracle Optimization before 5.17 allows authenticated quantum users to achieve remote code execution because of /v2/quantum/save-data-upload-big-file Java d… |
CVE-2022-29934 | High | 7.8 | 2022-04-29 | USU Oracle Optimization before 5.17.5 lacks Polkit authentication, which allows smartcollector users to achieve root access via pkexec. NOTE: this is not an Or… |
CVE-2022-29935 | High | 7.5 | 2022-04-29 | USU Oracle Optimization before 5.17.5 allows attackers to discover the quantum credentials via an agent-installer download. NOTE: this is not an Oracle Corpora… |