PT-2014-1273

CVE-2014-0415

·

Publicado

2014-01-15

·

Atualizado

2022-05-13

Descrição por

CVSS 2.0
10
Alta
MétricasAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Java Development Kit (affected versions not specified) Java Runtime Environment (affected versions not specified) Oracle JDK (affected versions not specified) Oracle JRE (affected versions not specified)
Description The issue allows a remote attacker to compromise the confidentiality, integrity, and availability of data using the Deployment subcomponent. This can be achieved by exploiting a vulnerability in the Java Development Kit, Java Runtime Environment, Oracle JDK, or Oracle JRE. The vulnerability is related to the subcomponents of the program.
Recommendations For Java Development Kit, update to a version that addresses the issue with the Deployment subcomponent. For Java Runtime Environment, update to a version that addresses the issue with the Deployment subcomponent. For Oracle JDK, update to a version that addresses the issue with the Deployment subcomponent. For Oracle JRE, update to a version that addresses the issue with the Deployment subcomponent. As a temporary workaround, consider disabling the Deployment subcomponent until a patch is available.
Explorabilidade
Exploit
Correção
Fornecedores
Produtos afetados
Enumeração de fraquezas
Identificadores relacionados
HPSBUX02972
HPSBUX02973
RHSA-2014:0030
RHSA-2014_0030
RHSA-2014:0134
RHSA-2014_0134
RHSA-2014:0135
RHSA-2014_0135
RHSA-2014:0414
RHSA-2014_0414
RHSA-2014:0705
RHSA-2014_0705
RHSA-2014:0982
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾