CVE-2010-3584

EPSS 0.16%
Published 14.10.2010 18:00:18
Last modified 11.04.2025 00:51:21
Source secalert_us@oracle.com
Teams watchlist Login
Open Login

Unspecified vulnerability in the Oracle VM component in Oracle VM 2.2.1 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to ovs-agent.  NOTE: the previous information was obtained from the October 2010 CPU.  Oracle has not commented on claims from a third party researcher that this is related to the storage of passwords and password hashes in cleartext in files with insecure permissions.

Affected products Warnungen 0 Metrics 2 CWE 0 References 6

Data is provided by the National Vulnerability Database (NVD)

Oracle ≫ Vm Version2.2.1

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.16%	0.33

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	4.3	3.1	6.4	AV:L/AC:L/Au:S/C:P/I:P/A:P

http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html

Vendor Advisory

http://www.us-cert.gov/cas/techalerts/TA10-287A.html

US Government Resource

http://www.securityfocus.com/archive/1/514612/100/0/threaded

https://nvd.nist.gov/vuln/detail/CVE-2010-3584

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2010-3584

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2010-3584

EUVD