PT-2018-15619 · Oracle · Java Micro Edition+1

Published 2018-01-18 · Updated 2019-10-03 · CVE-2018-2569

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Oracle Java Micro Edition version 8.3

Description The issue allows an unauthenticated attacker with logon to the infrastructure where Java ME SDK executes to compromise Java ME SDK. This requires human interaction from a person other than the attacker and can result in the takeover of Java ME SDK. The issue is specific to the Windows platform.

Recommendations For Oracle Java Micro Edition version 8.3, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2018-2569

Affected Products

Java Me Sdk

Java Micro Edition

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2018-2569 · Security Note
• https://osv.dev/vulnerability/CVE-2018-2569 · Vendor Advisory
• http://oracle.com/technetwork/security-advisory/cpujan2018-3236628.html · Vendor Advisory
• http://securitytracker.com/id/1040217 · Note
• http://securityfocus.com/bid/102536 · Note