CVE-2015-0412

Опубликовано: 20 янв. 2015

Источник: redhat

CVSS2: 6.8

EPSS Низкий

Описание

Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAX-WS.

An improper permission check issue was discovered in the JAX-WS component in OpenJDK. An untrusted Java application or applet could use these flaws to bypass Java sandbox restrictions.

Затронутые пакеты

Платформа	Пакет	Состояние	Рекомендация	Релиз
Red Hat Enterprise Linux 7	java-1.8.0-openjdk	Not affected
Red Hat Enterprise Linux 7	java-1.8.0-oracle	Not affected
Oracle Java for Red Hat Enterprise Linux 5	java-1.7.0-oracle	Fixed	RHSA-2015:0079	22.01.2015
Oracle Java for Red Hat Enterprise Linux 5	java-1.6.0-sun	Fixed	RHSA-2015:0086	26.01.2015
Oracle Java for Red Hat Enterprise Linux 6	java-1.7.0-oracle	Fixed	RHSA-2015:0079	22.01.2015
Oracle Java for Red Hat Enterprise Linux 6	java-1.8.0-oracle	Fixed	RHSA-2015:0080	22.01.2015
Oracle Java for Red Hat Enterprise Linux 6	java-1.6.0-sun	Fixed	RHSA-2015:0086	26.01.2015
Oracle Java for Red Hat Enterprise Linux 7	java-1.7.0-oracle	Fixed	RHSA-2015:0079	22.01.2015
Oracle Java for Red Hat Enterprise Linux 7	java-1.6.0-sun	Fixed	RHSA-2015:0086	26.01.2015
Red Hat Enterprise Linux 5	java-1.7.0-openjdk	Fixed	RHSA-2015:0068	20.01.2015

Показывать по

Ссылки на источники

Дополнительная информация

Статус:

Critical

https://bugzilla.redhat.com/show_bug.cgi?id=1183021OpenJDK: insufficient code privileges checks (JAX-WS, 8054367)

EPSS

Процентиль: 84%

0.02083

Низкий

6.8 Medium

CVSS2

Связанные уязвимости

CVE-2015-0412

ubuntu

около 11 лет назад

Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAX-WS.

CVE-2015-0412

nvd

около 11 лет назад

Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAX-WS.

CVE-2015-0412

debian

около 11 лет назад

Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allow ...

GHSA-5rmc-hxjg-x3qp

github

больше 3 лет назад

Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAX-WS.

ELSA-2015-0085

oracle-oval

около 11 лет назад

ELSA-2015-0085: java-1.6.0-openjdk security update (IMPORTANT)

EPSS

Процентиль: 84%

0.02083

Низкий

6.8 Medium

CVSS2