PT-2016-2648 · Oracle+5 · Java Se+6
Publicado
2016-07-20
·
Atualizado
2024-06-15
·
CVE-2016-3598
CVSS v3.1
9.6
Crítica
| Vetor | AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Oracle Java SE version 8u92
Java SE Embedded version 8u91
Description
The issue is related to errors in the code of the Java Platform, allowing remote attackers to affect confidentiality, integrity, and availability via vectors related to Libraries. It has been noted that there is no confidentiality impact, but there is a low integrity impact and no availability impact related to the Networking component.
Recommendations
For Oracle Java SE version 8u92, update to a version that addresses the issue.
For Java SE Embedded version 8u91, update to a version that addresses the issue.
As a temporary workaround, consider restricting access to the Libraries component to minimize the risk of exploitation.
Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Centos
Ibm Aix
Java Platform
Java Se
Red Hat
Suse
Ubuntu