PT-2018-2229 · Oracle+1 · Java Se+3
Publicado
2018-10-16
·
Atualizado
2022-06-27
·
CVE-2018-3209
CVSS v3.1
8.3
Alta
| Vetor | AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Java SE version 8u182
Description
The issue is related to insufficient access control in the JavaFX component of Java SE, which can be exploited by a remote attacker to gain full control over the application. The vulnerability is difficult to exploit and requires human interaction from a person other than the attacker. It can compromise Java SE and may significantly impact additional products. This issue applies to Java deployments that load and run untrusted code, such as sandboxed Java Web Start applications or sandboxed Java applets, and rely on the Java sandbox for security.
Recommendations
For Java SE version 8u182, update to a version that contains a fix for this issue to prevent exploitation. As a temporary workaround, consider restricting the use of the JavaFX component until a patch is available. Additionally, ensure that only trusted code is loaded and run on servers to minimize the risk of exploitation.
Correção
Improper Access Control
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Java Platform
Java Se
Javafx
Red Hat