CVE-2017-3565: Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: RBAC).

Security readout for executives and security teams

This Solaris 11.3 RBAC flaw could let a low-privileged logged-in user gain unauthorized read and modification access to critical or broadly accessible Solaris data. It requires human interaction by someone other than the attacker, but impact can extend beyond Solaris to dependent products. Exposure is most likely on systems still running Oracle Solaris 11.3 where untrusted or lightly trusted users have local logon access. Systems using Solaris-hosted services or products may inherit impact if compromised Solaris data or privileges affect them. Treat this as high priority for legacy Solaris environments with shared user access. The issue threatens confidentiality and integrity, not availability, and should drive patch verification, access reduction, or system isolation. Mitigation focus: Check Oracle's April 2017 CPU guidance for Solaris 11.3 remediation.; Apply the vendor-documented Solaris updates or mitigations where applicable.; Reduce local logon access to trusted administrative users only..

Prepared

Jun 13, 2026, 05:18 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.