CVE-2016-5551

Vulnerability in the Solaris Cluster component of Oracle Sun Systems Products Suite (subcomponent: NAS device addition). The supported version that is affected is 4.3. Easily "exploitable" vulnerability allows unauthenticated attacker with logon to the infrastructure where Solaris Cluster executes to compromise Solaris Cluster. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Solaris Cluster accessible data. CVSS 3.0 Base Score 3.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N).

• CWE-284

• http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.htmlPatch, Vendor Advisory
• http://www.securityfocus.com/bid/97803Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1038292
• http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.htmlPatch, Vendor Advisory
• http://www.securityfocus.com/bid/97803Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1038292

Published

Apr 24, 2017

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-5545Vulnerability in the Oracle VM VirtualBox component of Oracl…
• CVE-2016-5546Vulnerability in the Java SE, Java SE Embedded, JRockit comp…
• CVE-2016-5547Vulnerability in the Java SE, Java SE Embedded, JRockit comp…
• CVE-2016-5548Vulnerability in the Java SE, Java SE Embedded component of …
• CVE-2016-5549Vulnerability in the Java SE, Java SE Embedded component of …
• CVE-2016-5550Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2016-5552Vulnerability in the Java SE, Java SE Embedded, JRockit comp…
• CVE-2016-5553Unspecified vulnerability in Oracle Sun Solaris 10 and 11.3 …
• CVE-2016-5554Unspecified vulnerability in Oracle Java SE 6u121, 7u111, 8u…
• CVE-2016-5555Unspecified vulnerability in the OJVM component in Oracle Da…
• CVE-2016-5556Unspecified vulnerability in Oracle Java SE 6u121, 7u111, an…
• CVE-2016-5557Unspecified vulnerability in the Oracle Advanced Pricing com…