PT-2014-1226 · Oracle+4 · Java Runtime Environment+6

Publicado

2014-01-15

·

Atualizado

2022-05-13

·

CVE-2014-0410

CVSS v2.0

10

Alta

VetorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Java Runtime Environment (affected versions not specified) Java Development Kit (affected versions not specified)
Description The issue is related to a component of the Java platform, specifically the Deployment component. It allows a remote attacker to compromise the confidentiality and integrity of data.
Recommendations For Java Runtime Environment, consider disabling the Deployment component until a patch is available. For Java Development Kit, restrict access to the Deployment component to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-461

Identificadores relacionados

BDU:2014-00418
BDU:2014-00419
CVE-2014-0410
HPSBUX02972
HPSBUX02973
RHSA-2014:0030
RHSA-2014:0134
RHSA-2014:0135
RHSA-2014:0414
RHSA-2014:0705
RHSA-2014:0982
RHSA-2014_0030
RHSA-2014_0134
RHSA-2014_0135
RHSA-2014_0414
RHSA-2014_0705

Produtos afetados

Hp-Ux
Ibm Aix
Java Development Kit
Java Platform
Java Runtime Environment
Red Hat
Suse