PT-2024-29680 · Oracle · Java Platform

Published 2024-08-06 · Updated 2024-08-14 · CVE-2024-41995

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions JavaTM Platform versions prior to 12.89

Description The issue is related to the initialization of a resource with an insecure default, which may expose the product to known TLS 1.0 and TLS 1.1 vulnerabilities if exploited. The specific products, models, and versions of MFPs and printers that contain JavaTM Platform should be checked with the vendor for more information.

Recommendations For JavaTM Platform versions prior to 12.89, patch immediately and review TLS configurations to mitigate the risk of sensitive data exposure.

Fix

Weakness Enumeration

CWE-1188

Related Identifiers

CVE-2024-41995

Affected Products

Java Platform

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2024-41995 · Security Note
• https://twitter.com/oktsec/status/1823845606361542675 · Twitter Post
• https://jvn.jp/en/jp/JVN78728294 · Note
• https://t.me/cvenotify/89360 · Telegram Post
• https://t.me/cvedetector/2542 · Telegram Post
• https://jp.ricoh.com/security/products/vulnerabilities/vul?id=ricoh-2024-000010 · Note
• https://ricoh.com/products/security/vulnerabilities/vul?id=ricoh-2024-000010 · Note