PT-2018-1385 · Oracle+1 · Java Se+2
Publicado
2018-07-17
·
Atualizado
2024-06-15
·
CVE-2018-2938
CVSS v3.1
9.0
Crítica
| Vetor | AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Java SE (affected versions not specified)
Description
The issue is related to inadequate access control in the Java DB component of the Java SE platform. It can be exploited by a remote attacker to gain full control over the application using network protocols. The vulnerability allows unauthorized individuals with network access to compromise Java SE and gain control over it. This can be done by sending data to component interfaces without using untrusted Java Web Start applications or Java applets, such as through a web service.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Improper Access Control
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Java Platform
Java Se
Suse