PT-2014-1237 · Oracle+4 · Java Se Embedded+6

Publicado 2014-04-15 · Atualizado 2022-05-13 · CVE-2014-2409

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 6u71 through 8 Java SE Embedded version 7u51

Description The issue allows remote attackers to affect confidentiality and integrity via unknown vectors related to the Deployment component. This can lead to a violation of data confidentiality, integrity, and availability.

Recommendations For Oracle Java SE versions 6u71 through 8, update to a version that is not affected by this issue. For Java SE Embedded version 7u51, update to a version that is not affected by this issue. As a temporary workaround, consider restricting access to the Deployment component until a patch is available.

Exploit

Correção

Enumeração de Fraquezas

CWE-461

Identificadores relacionados

BDU:2014-00441

BDU:2014-00442

CVE-2014-2409

HPSBUX03091

HPSBUX03092

RHSA-2014:0412

RHSA-2014:0413

RHSA-2014:0414

RHSA-2014:0486

RHSA-2014:0508

RHSA-2014:0705

RHSA-2014:0982

RHSA-2014_0412

RHSA-2014_0413

RHSA-2014_0414

RHSA-2014_0486

RHSA-2014_0508

RHSA-2014_0705

Produtos afetados

Hp-Ux

Ibm Aix

Java Platform

Java Se

Java Se Embedded

Red Hat

Suse

Referências · 361

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/java_storeimagearray.rb · Exploit
• https://bdu.fstec.ru/vul/2015-00016 · Nota de Segurança
• https://access.redhat.com/security/cve/CVE-2013-2468 · Nota
• http://oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA · Nota
• http://securityfocus.com/bid/66915 · Nota
• https://access.redhat.com/security/cve/CVE-2013-5789 · Nota
• https://bdu.fstec.ru/vul/2014-00485 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-00029 · Nota de Segurança
• https://bdu.fstec.ru/vul/2014-00435 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-00562 · Nota de Segurança
• http://h20566.www2.hp.com/portal/site/hpsc/template.PAGE/action.process/public/kb/docDisplay/?javax.portlet.action=true&spf_p.tpst=kbDocDisplay&javax.portlet.begCacheTok=com.vignette.cachetoken&spf_p.prp_kbDocDisplay=wsrp-interactionState%3DdocId%253DZW1yX25hLWMwNDM5ODkyMg%2525253D%2525253DhPsCeNc%257CdocLocale%253Den_US%257CcalledBy%253D&javax.portlet.endCacheTok=com.vignette.cachetoken · Nota
• https://bdu.fstec.ru/vul/2015-00015 · Nota de Segurança
• https://access.redhat.com/security/cve/CVE-2014-0452 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2423 · Nota de Segurança
• https://access.redhat.com/errata/RHSA-2014:0414 · Aviso do Fabricante