Usu vulnerabilities
We track 3 vulnerabilities in Usu products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on April 29, 2022.
Latest Usu vulnerabilities
- 8.8 High severity
Oracle Optimization: Improper Neutralization of Special Elements used in an OS Command
USU Oracle Optimization before 5.17.5 allows authenticated DataCollection users to achieve agent root access because some common OS commands are blocked but (for example) an OS command for base64 decoding is not blocked. NOTE: this is not an Oracle Corporation
- 8.8 High severity
Oracle Optimization: Deserialization of Untrusted Data
USU Oracle Optimization before 5.17 allows authenticated quantum users to achieve remote code execution because of /v2/quantum/save-data-upload-big-file Java deserialization. NOTE: this is not an Oracle Corporation product.
- 7.8 High severity
Oracle Optimization: Missing Authentication for Critical Functionality
USU Oracle Optimization before 5.17.5 lacks Polkit authentication, which allows smartcollector users to achieve root access via pkexec. NOTE: this is not an Oracle Corporation product.