PT-2018-1385 · Oracle+1 · Java Se+2

Published

2018-07-17

·

Updated

2024-06-15

·

CVE-2018-2938

CVSS v3.1

9.0

Critical

VectorAV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Java SE (affected versions not specified)
Description The issue is related to inadequate access control in the Java DB component of the Java SE platform. It can be exploited by a remote attacker to gain full control over the application using network protocols. The vulnerability allows unauthorized individuals with network access to compromise Java SE and gain control over it. This can be done by sending data to component interfaces without using untrusted Java Web Start applications or Java applets, such as through a web service.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Access Control

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-284

Related Identifiers

BDU:2018-00930
CVE-2018-2938
OPENSUSE-SU-2018_3057-1
OPENSUSE-SU-2018_3103-1
OPENSUSE-SU-2019_0042-1
OPENSUSE-SU-2024:10876-1
SUSE-SU-2018:3045-1
SUSE-SU-2018:3064-1
SUSE-SU-2018:3064-2
SUSE-SU-2018:3064-3
SUSE-SU-2018_3045-1
SUSE-SU-2019:0049-1
SUSE-SU-2019:0049-2

Affected Products

Java Platform
Java Se
Suse