CVE-2018-2906

Vulnerability in the Hardware Management Pack component of Oracle Sun Systems Products Suite (subcomponent: Ipmitool). The supported version that is affected is 11.3. Difficult to exploit vulnerability allows unauthenticated attacker with network access via IPMI to compromise Hardware Management Pack. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Hardware Management Pack accessible data. CVSS 3.0 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).

• http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.htmlPatch, Vendor Advisory
• http://www.securityfocus.com/bid/104808Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1041303Third Party Advisory, VDB Entry
• http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.htmlPatch, Vendor Advisory
• http://www.securityfocus.com/bid/104808Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1041303Third Party Advisory, VDB Entry

Published

Jul 18, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-2900Vulnerability in the BI Publisher component of Oracle Fusion…
• CVE-2018-2901Vulnerability in the Solaris component of Oracle Sun Systems…
• CVE-2018-2902Vulnerability in the Oracle WebLogic Server component of Ora…
• CVE-2018-2903Vulnerability in the Solaris component of Oracle Sun Systems…
• CVE-2018-2904Vulnerability in the Oracle Communications EAGLE LNP Applica…
• CVE-2018-2905Vulnerability in the Sun ZFS Storage Appliance Kit (AK) comp…
• CVE-2018-2907Vulnerability in the Hyperion Financial Reporting component …
• CVE-2018-2908Vulnerability in the Solaris component of Oracle Sun Systems…
• CVE-2018-2909Vulnerability in the Oracle VM VirtualBox component of Oracl…
• CVE-2018-2911Vulnerability in the Oracle GlassFish Server component of Or…
• CVE-2018-2912Vulnerability in the Oracle GoldenGate component of Oracle G…
• CVE-2018-2913Vulnerability in the Oracle GoldenGate component of Oracle G…