PT-2018-16044 · Oracle+4 · Java Se+5
Publicado
2018-10-16
·
Atualizado
2024-06-15
·
CVE-2018-3150
CVSS v2.0
4.3
Média
| Vetor | AV:N/AC:M/Au:N/C:N/I:P/A:N |
Name of the Vulnerable Software and Affected Versions
Java SE version 11
Description
The issue allows an unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks can result in unauthorized update, insert, or delete access to some of Java SE's accessible data. This applies to Java deployments that load and run untrusted code, relying on the Java sandbox for security, and does not apply to deployments that load and run only trusted code.
Recommendations
For Java SE version 11, update to a version that includes the fix for this issue to prevent unauthorized access to Java SE's data. As a temporary workaround, consider restricting the loading and running of untrusted code to minimize the risk of exploitation.
Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Centos
Java Platform
Java Se
Red Hat
Suse
Ubuntu