CVE-2020-2981
Berkeley DB vulnerability analysis and mitigation

Overview

CVE-2020-2981 is a security vulnerability discovered in the Data Store component of Oracle Berkeley DB, affecting versions prior to 18.1.40. The vulnerability was disclosed in Oracle's July 2020 Critical Patch Update (Oracle CPU).

Technical details

This vulnerability is classified as difficult to exploit and requires an unauthenticated attacker with logon access to the infrastructure where Data Store executes. The vulnerability has been assigned a CVSS 3.1 Base Score of 7.0, indicating high severity, with potential impacts on Confidentiality, Integrity, and Availability. The CVSS Vector is (CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) (Oracle CPU).

Impact

Successful exploitation of this vulnerability can result in complete takeover of the Data Store component. The high CVSS score indicates that successful attacks can lead to significant compromise of the system's confidentiality, integrity, and availability (Oracle CPU).

Mitigation and workarounds

Oracle has released a security patch for this vulnerability in their July 2020 Critical Patch Update. Users should upgrade to Oracle Berkeley DB version 18.1.40 or later to address this vulnerability. Oracle strongly recommends that customers apply Critical Patch Update security patches as soon as possible (Oracle CPU).

Additional resources


SourceThis report was generated using AI

Free Vulnerability Assessment

Benchmark your Cloud Security Posture

Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.

Request assessment

Get a personalized demo

Ready to see Wiz in action?

"Best User Experience I have ever seen, provides full visibility to cloud workloads."
David EstlickCISO
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
Adam FletcherChief Security Officer
"We know that if Wiz identifies something as critical, it actually is."
Greg PoniatowskiHead of Threat and Vulnerability Management