PT-2015-3901
CVE-2014-6593
·
Publicado
2015-01-20
·
Atualizado
2024-06-15
Descrição por
CVSS 2.0
4.0
MédiaMétricasAV:N/AC:H/Au:N/C:P/I:P/A:N
Name of the Vulnerable Software and Affected Versions
Oracle Java SE versions 5.0u75, 6u85, 7u72, and 8u25
Oracle Java SE Embedded versions 7u71 and 8u6
JRockit versions 27.8.4 and 28.3.4
Description
The issue affects confidentiality and integrity, allowing remote attackers to exploit it via vectors related to JSSE.
Recommendations
For Oracle Java SE versions 5.0u75, 6u85, 7u72, and 8u25, update to a version that is not affected by this issue.
For Oracle Java SE Embedded versions 7u71 and 8u6, update to a version that is not affected by this issue.
For JRockit versions 27.8.4 and 28.3.4, update to a version that is not affected by this issue.
As a temporary workaround, consider restricting access to JSSE-related functionality until a patch is available.
Explorabilidade
Exploit
Correção
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾