Lucene search

K
cve[email protected]CVE-2010-3223
HistoryOct 13, 2010 - 7:00 p.m.

CVE-2010-3223

2010-10-1319:00:00
CWE-264
web.nvd.nist.gov
26
microsoft
cluster service
mscs
windows server 2008 r2
administrative-share
permissions
failover cluster
remote attackers
vulnerability
nvd
cve-2010-3223

6.7 Medium

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.007 Low

EPSS

Percentile

79.6%

The user interface in Microsoft Cluster Service (MSCS) in Microsoft Windows Server 2008 R2 does not properly set administrative-share permissions for new cluster disks that are shared as part of a failover cluster, which allows remote attackers to read or modify data on these disks via requests to the associated share, aka “Permissions on New Cluster Disks Vulnerability.”

6.7 Medium

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.007 Low

EPSS

Percentile

79.6%

Related for CVE-2010-3223