PT-2014-1268 · Oracle+4 · Oracle Java Se+5

Publicado 2014-04-15 · Atualizado 2022-05-13 · CVE-2014-0448

Positive Technologies (AI Summary)

CVSS v2.0

7.6

Alta

Vetor base

AV:N/AC:H/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 7u51 through 8

Description The issue affects the confidentiality, integrity, and availability of data. It is related to the Deployment component. Remote attackers can exploit this issue via unknown vectors.

Recommendations For Oracle Java SE versions 7u51 through 8, update to a version that contains a fix for this issue. As a temporary workaround, consider restricting access to the Deployment component to minimize the risk of exploitation.

Correção

Enumeração de Fraquezas

CWE-461

Identificadores relacionados

BDU:2015-00019

BDU:2015-00020

CVE-2014-0448

HPSBUX03091

RHSA-2014:0412

RHSA-2014:0413

RHSA-2014:0486

RHSA-2014:0705

RHSA-2014_0412

RHSA-2014_0413

RHSA-2014_0486

RHSA-2014_0705

Produtos afetados

Hp-Ux

Ibm Aix

Java Platform

Oracle Java Se

Red Hat

Suse

Referências · 268

• https://bdu.fstec.ru/vul/2015-00038 · Nota de Segurança
• https://bdu.fstec.ru/vul/2014-00481 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4209 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-00017 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-00568 · Nota de Segurança
• https://bdu.fstec.ru/vul/2014-00468 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2402 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-00578 · Nota de Segurança
• https://bdu.fstec.ru/vul/2014-00483 · Nota de Segurança
• https://access.redhat.com/security/cve/CVE-2013-5899 · Nota
• https://bdu.fstec.ru/vul/2014-00443 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-00581 · Nota de Segurança
• https://access.redhat.com/security/cve/CVE-2014-0411 · Nota
• https://bdu.fstec.ru/vul/2014-00438 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4244 · Nota de Segurança