PT-2014-1237 · Oracle+4 · Java Se Embedded+6

Published

2014-04-15

·

Updated

2022-05-13

·

CVE-2014-2409

CVSS v2.0

6.4

Medium

VectorAV:N/AC:L/Au:N/C:P/I:P/A:N
Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 6u71 through 8 Java SE Embedded version 7u51
Description The issue allows remote attackers to affect confidentiality and integrity via unknown vectors related to the Deployment component. This can lead to a violation of data confidentiality, integrity, and availability.
Recommendations For Oracle Java SE versions 6u71 through 8, update to a version that is not affected by this issue. For Java SE Embedded version 7u51, update to a version that is not affected by this issue. As a temporary workaround, consider restricting access to the Deployment component until a patch is available.

Exploit

Fix

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-461

Related Identifiers

BDU:2014-00441
BDU:2014-00442
CVE-2014-2409
HPSBUX03091
HPSBUX03092
RHSA-2014:0412
RHSA-2014:0413
RHSA-2014:0414
RHSA-2014:0486
RHSA-2014:0508
RHSA-2014:0705
RHSA-2014:0982
RHSA-2014_0412
RHSA-2014_0413
RHSA-2014_0414
RHSA-2014_0486
RHSA-2014_0508
RHSA-2014_0705

Affected Products

Hp-Ux
Ibm Aix
Java Platform
Java Se
Java Se Embedded
Red Hat
Suse