PT-2013-2345

CVE-2013-0450

·

Published

2013-02-01

·

Updated

2024-06-15

Description by

CVSS 2.0
10
High
MetricsAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Java SE versions 5.0 through Update 38 Java SE versions 6 through Update 38 Java SE versions 7 through Update 11 OpenJDK versions 6 and 7
Description The issue affects the Java Runtime Environment component, allowing remote attackers to impact confidentiality, integrity, and availability via vectors related to JMX. It is reportedly related to improper checks of access control context in the JMX RequiredModelMBean class.
Recommendations For Java SE versions 5.0 through Update 38, update to a version later than Update 38. For Java SE versions 6 through Update 38, update to a version later than Update 38. For Java SE versions 7 through Update 11, update to a version later than Update 11. For OpenJDK versions 6 and 7, consider disabling JMX functionality until a patch is available.
Exploitability
Exploit
Fix
Researchers
Vendors
Affected products
Related identifiers
CESA-2013_0245
CESA-2013_0247
HPSBUX02857
HPSBUX02864
OPENSUSE-SU-2013_0308-1
OPENSUSE-SU-2013_0312-1
OPENSUSE-SU-2013_0377-1
OPENSUSE-SU-2024:10534-1
RHSA-2013:0236
RHSA-2013_0236
RHSA-2013:0237
RHSA-2013_0237
RHSA-2013:0245
RHSA-2013_0245
RHSA-2013:0246
RHSA-2013_0246
RHSA-2013:0247
RHSA-2013_0247
RHSA-2013:0624
RHSA-2013_0624
RHSA-2013:0625
RHSA-2013_0625
RHSA-2013:0626
RHSA-2013_0626
RHSA-2013:1455
RHSA-2013:1456
Found an issue in the description? Have something to add? Feel free to write us 👾