PT-2015-1667 · Oracle+5 · Jrockit+9
Publicado
2015-07-15
·
Atualizado
2024-06-15
·
CVE-2015-2625
CVSS v2.0
2.6
Baixa
| Vetor | AV:N/AC:H/Au:N/C:P/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Java SE versions 6u95, 7u80, and 8u45
JRockit version R28.3.6
Java SE Embedded versions 7u75 and 8u33
Description
The issue is related to errors in the code of the JSSE component in Java Platform and JRockit. It may allow a remote attacker to compromise the confidentiality of information. The vulnerability can be exploited by remote attackers via vectors related to JSSE.
Recommendations
For Java SE versions 6u95, 7u80, and 8u45, update to a version that contains a fix for this issue.
For JRockit version R28.3.6, update to a version that contains a fix for this issue.
For Java SE Embedded versions 7u75 and 8u33, update to a version that contains a fix for this issue.
As a temporary workaround, consider restricting access to JSSE components until a patch is available.
Exploit
Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Centos
Ibm Aix
Jrockit
Jsse
Java Platform
Java Se
Java Se Embedded
Red Hat
Suse
Ubuntu