CVE-2019-2807

CVE-2019-2807 is a low-severity vulnerability affecting Oracle Solaris 11.4, specifically within its Zones subcomponent. A low-privileged attacker with infrastructure logon can exploit this vulnerability, but successful attacks require user interaction from a non-attacker. This can lead to unauthorized data modification or deletion, and a partial denial of service. The CVSS 3.0 base score is 3.9, indicating a low impact on integrity and availability, with no confidentiality impact. The attack vector is local, and the attack complexity is low, but user interaction is required. There is no evidence of active exploitation, and no public exploit code is available in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal, consistent with the majority of reported vulnerabilities.