PT-2014-1275 · Oracle+6 · Java Se Embedded+9
Publicado
2014-04-15
·
Atualizado
2024-06-15
·
CVE-2014-0460
CVSS v2.0
5.8
Média
| Vetor | AV:N/AC:M/Au:N/C:P/I:P/A:N |
Name of the Vulnerable Software and Affected Versions
Oracle Java SE versions 5.0u61, 6u71, 7u51, and 8
JRockit versions R27.8.1 and R28.3.1
Java SE Embedded version 7u51
Description
The issue allows remote attackers to affect confidentiality and integrity via vectors related to JNDI. This can be exploited by remote attackers to disrupt confidentiality and integrity of data using the JNDI subcomponent.
Recommendations
For Oracle Java SE versions 5.0u61, 6u71, 7u51, and 8, consider updating to a version that is not affected by this issue.
For JRockit versions R27.8.1 and R28.3.1, consider updating to a version that is not affected by this issue.
For Java SE Embedded version 7u51, consider updating to a version that is not affected by this issue.
As a temporary workaround, consider restricting access to the JNDI subcomponent until a patch is available.
Exploit
Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Centos
Hp-Ux
Ibm Aix
Jrockit
Java Platform
Java Se
Java Se Embedded
Red Hat
Suse
Ubuntu