vulnerability

Oracle Solaris 11: CVE-2021-22117 (11.4 SRU 39.107.1)

Severity
5
CVSS
(AV:L/AC:L/Au:N/C:P/I:P/A:P)
Published
May 18, 2021
Added
Nov 17, 2021
Modified
Feb 17, 2022

Description

RabbitMQ installers on Windows prior to version 3.8.16 do not harden plugin directory permissions, potentially allowing attackers with sufficient local filesystem permissions to add arbitrary plugins.

Solutions

oracle-solaris-11-4-upgrade-developer-elixir-hex-0-21-2-11-4-39-0-1-107-0oracle-solaris-11-4-upgrade-network-amqp-rabbitmq-3-8-18-11-4-39-0-1-107-0oracle-solaris-11-4-upgrade-runtime-elixir-1-12-1-11-4-39-0-1-107-0oracle-solaris-11-4-upgrade-runtime-erlang-24-0-2-11-4-39-0-1-107-0oracle-solaris-11-4-upgrade-runtime-erlang-documentation-24-0-2-11-4-39-0-1-107-0
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.