ID CVE-2020-2981
Summary Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Prior to 18.1.40. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Data Store executes to compromise Data Store. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Data Store. CVSS 3.1 Base Score 7.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H).
References
Vulnerable Configurations
  • cpe:2.3:a:oracle:berkeley_db:1.85:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:berkeley_db:1.85:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:berkeley_db:1.86:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:berkeley_db:1.86:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:berkeley_db:2.0.0:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:berkeley_db:2.0.0:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:berkeley_db:2.0.2:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:berkeley_db:2.0.2:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:berkeley_db:2.0.3:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:berkeley_db:2.0.3:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:berkeley_db:2.1.0:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:berkeley_db:2.1.0:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:berkeley_db:2.2.0:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:berkeley_db:2.2.0:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:berkeley_db:2.2.6:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:berkeley_db:2.2.6:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:berkeley_db:2.3.0:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:berkeley_db:2.3.0:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:berkeley_db:2.3.5:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:berkeley_db:2.3.5:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:berkeley_db:2.3.10:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:berkeley_db:2.3.10:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:berkeley_db:2.3.11:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:berkeley_db:2.3.11:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:berkeley_db:2.3.12:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:berkeley_db:2.3.12:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:berkeley_db:2.3.14:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:berkeley_db:2.3.14:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:berkeley_db:2.3.16:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:berkeley_db:2.3.16:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:berkeley_db:2.4.10:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:berkeley_db:2.4.10:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:berkeley_db:2.4.14:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:berkeley_db:2.4.14:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:berkeley_db:2.5.9:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:berkeley_db:2.5.9:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:berkeley_db:2.6.4:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:berkeley_db:2.6.4:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:berkeley_db:2.6.5:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:berkeley_db:2.6.5:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:berkeley_db:2.6.6:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:berkeley_db:2.6.6:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:berkeley_db:2.6.7:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:berkeley_db:2.6.7:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:berkeley_db:2.7.1:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:berkeley_db:2.7.1:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:berkeley_db:2.7.3:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:berkeley_db:2.7.3:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:berkeley_db:2.7.4:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:berkeley_db:2.7.4:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:berkeley_db:2.7.5:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:berkeley_db:2.7.5:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:berkeley_db:2.7.7:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:berkeley_db:2.7.7:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:berkeley_db:3.0.55:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:berkeley_db:3.0.55:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:berkeley_db:3.1.14:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:berkeley_db:3.1.14:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:berkeley_db:3.1.17:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:berkeley_db:3.1.17:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:berkeley_db:3.2.9:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:berkeley_db:3.2.9:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:berkeley_db:3.3.11:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:berkeley_db:3.3.11:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:berkeley_db:4.0.14:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:berkeley_db:4.0.14:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:berkeley_db:4.1.25:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:berkeley_db:4.1.25:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:berkeley_db:4.2.52:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:berkeley_db:4.2.52:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:berkeley_db:4.3.29:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:berkeley_db:4.3.29:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:berkeley_db:4.4.20:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:berkeley_db:4.4.20:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:berkeley_db:4.5.20:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:berkeley_db:4.5.20:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:berkeley_db:4.6.18:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:berkeley_db:4.6.18:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:berkeley_db:4.6.21:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:berkeley_db:4.6.21:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:berkeley_db:4.7.25:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:berkeley_db:4.7.25:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:berkeley_db:4.8.24:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:berkeley_db:4.8.24:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:berkeley_db:4.8.26:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:berkeley_db:4.8.26:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:berkeley_db:4.8.30:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:berkeley_db:4.8.30:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:berkeley_db:5.0.21:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:berkeley_db:5.0.21:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:berkeley_db:5.0.26:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:berkeley_db:5.0.26:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:berkeley_db:5.0.32:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:berkeley_db:5.0.32:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:berkeley_db:5.1.29:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:berkeley_db:5.1.29:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:berkeley_db:5.2.42:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:berkeley_db:5.2.42:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:berkeley_db:5.3.28:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:berkeley_db:5.3.28:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:berkeley_db:6.0.35:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:berkeley_db:6.0.35:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:berkeley_db:6.1.38:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:berkeley_db:6.1.38:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:berkeley_db:6.2.23:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:berkeley_db:6.2.23:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:berkeley_db:6.2.38:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:berkeley_db:6.2.38:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:berkeley_db:6.138:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:berkeley_db:6.138:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:berkeley_db:11.2.5.0.32:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:berkeley_db:11.2.5.0.32:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:berkeley_db:11.2.5.1.19:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:berkeley_db:11.2.5.1.19:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:berkeley_db:11.2.5.1.25:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:berkeley_db:11.2.5.1.25:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:berkeley_db:11.2.5.1.29:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:berkeley_db:11.2.5.1.29:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:berkeley_db:11.2.5.2.28:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:berkeley_db:11.2.5.2.28:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:berkeley_db:11.2.5.2.36:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:berkeley_db:11.2.5.2.36:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:berkeley_db:11.2.5.2.42:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:berkeley_db:11.2.5.2.42:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:berkeley_db:11.2.5.3.15:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:berkeley_db:11.2.5.3.15:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:berkeley_db:11.2.5.3.21:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:berkeley_db:11.2.5.3.21:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:berkeley_db:11.2.5.3.28:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:berkeley_db:11.2.5.3.28:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:berkeley_db:12.1.6.0.20:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:berkeley_db:12.1.6.0.20:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:berkeley_db:12.1.6.0.30:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:berkeley_db:12.1.6.0.30:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:berkeley_db:12.1.6.0.35:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:berkeley_db:12.1.6.0.35:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:berkeley_db:12.1.6.1.19:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:berkeley_db:12.1.6.1.19:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:berkeley_db:12.1.6.1.23:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:berkeley_db:12.1.6.1.23:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:berkeley_db:12.1.6.1.26:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:berkeley_db:12.1.6.1.26:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:berkeley_db:12.1.6.1.29:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:berkeley_db:12.1.6.1.29:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:berkeley_db:12.1.6.1.36:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:berkeley_db:12.1.6.1.36:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:berkeley_db:12.1.6.1.38:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:berkeley_db:12.1.6.1.38:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:berkeley_db:12.1.6.2.23:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:berkeley_db:12.1.6.2.23:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:berkeley_db:12.1.6.2.32:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:berkeley_db:12.1.6.2.32:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:berkeley_db:18.1:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:berkeley_db:18.1:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:berkeley_db:18.1.32:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:berkeley_db:18.1.32:*:*:*:*:*:*:*
CVSS
Base: 3.7 (as of 20-07-2020 - 18:54)
Impact:
Exploitability:
CWE NVD-CWE-noinfo
CAPEC
Access
VectorComplexityAuthentication
LOCAL HIGH NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL PARTIAL
cvss-vector via4 AV:L/AC:H/Au:N/C:P/I:P/A:P
refmap via4
misc https://www.oracle.com/security-alerts/cpujul2020.html
Last major update 20-07-2020 - 18:54
Published 15-07-2020 - 18:15
Last modified 20-07-2020 - 18:54
Back to Top