PT-2014-1252

CVE-2014-0424

·

Publicado

2014-01-15

·

Atualizado

2022-05-13

Descrição por

CVSS 2.0
7.5
Alta
MétricasAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Java Development Kit (affected versions not specified) Java Runtime Environment (affected versions not specified) Oracle Java SE (affected versions not specified)
Description The issue is related to a vulnerability in the Java Development Kit, Java Runtime Environment, and Oracle Java SE, specifically with the Deployment subcomponent. This vulnerability allows a remote attacker to compromise the confidentiality and integrity of data. The vulnerability can also affect the availability of data.
Recommendations For Java Development Kit, consider disabling the Deployment subcomponent until a patch is available. For Java Runtime Environment, restrict access to the Deployment subcomponent to minimize the risk of exploitation. For Oracle Java SE, avoid using the Deployment subcomponent in sensitive operations until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Explorabilidade
Exploit
Fornecedores
Produtos afetados
Enumeração de fraquezas
Identificadores relacionados
HPSBUX02972
HPSBUX02973
RHSA-2014:0030
RHSA-2014_0030
RHSA-2014:0134
RHSA-2014_0134
RHSA-2014:0135
RHSA-2014_0135
RHSA-2014:0414
RHSA-2014_0414
RHSA-2014:0705
RHSA-2014_0705
RHSA-2014:0982
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾