CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 7.8. It affects Oracle. Public exploit code or proof-of-concept references have been detected in its references.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
GitHub PoC Links
Note: these links are listed for security research and verification purposes only.
CVE
CVE-2022-29934
Severity
HIGH
CVSS
7.8
EPSS
0.33%
Oracle
Original NVD Description
USU Oracle Optimization before 5.17.5 lacks Polkit authentication, which allows smartcollector users to achieve root access via pkexec. NOTE: this is not an Oracle Corporation product.
Related CVEs
Other vulnerabilities affecting the same vendor(s)