CVE-2023-21833

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-21833
Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: Object Store). The supported version that is affected is 8.8. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle ZFS Storage Appliance Kit. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle ZFS Storage Appliance Kit accessible data. CVSS 3.1 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).

4.3 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://www.oracle.com/security-alerts/cpujan2024.html Vendor Advisory
https://www.oracle.com/security-alerts/cpujan2024.html Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:oracle:zfs_storage_appliance_kit:8.8:*:*:*:*:*:*:*
History

27 Mar 2025, 15:15

Type Values Removed Values Added
CWE CWE-200

27 Nov 2024, 16:32

Type Values Removed Values Added
CPE cpe:2.3:a:oracle:zfs_storage_appliance_kit:8.8:*:*:*:*:*:*:*
CWE NVD-CWE-noinfo
References () https://www.oracle.com/security-alerts/cpujan2024.html - () https://www.oracle.com/security-alerts/cpujan2024.html - Vendor Advisory
First Time Oracle
Oracle zfs Storage Appliance Kit

21 Nov 2024, 07:43

Type Values Removed Values Added
References () https://www.oracle.com/security-alerts/cpujan2024.html - () https://www.oracle.com/security-alerts/cpujan2024.html -

20 Feb 2024, 19:51

Type Values Removed Values Added
Summary
  • (es) Vulnerabilidad en el producto Oracle ZFS Storage Appliance Kit de Oracle Systems (componente: Object Store). La versión compatible que se ve afectada es la 8.8. Una vulnerabilidad fácilmente explotable permite a un atacante con pocos privilegios y acceso a la red a través de HTTP comprometer el kit de dispositivos de almacenamiento Oracle ZFS. Los ataques exitosos de esta vulnerabilidad pueden resultar en acceso de lectura no autorizado a un subconjunto de datos accesibles del Oracle ZFS Storage Appliance Kit. CVSS 3.1 Puntaje base 4.3 (Impactos en la confidencialidad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).

17 Feb 2024, 02:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-02-17 02:15

Updated : 2025-03-27 15:15

NVD link : CVE-2023-21833

Mitre link : CVE-2023-21833

CVE.ORG link : CVE-2023-21833

JSON object : View

Products Affected

oracle

  • zfs_storage_appliance_kit
CWE
NVD-CWE-noinfo CWE-200

Exposure of Sensitive Information to an Unauthorized Actor