PT-2013-3787
CVE-2013-2453
·
Published
2013-06-18
·
Updated
2024-06-15
Description by
CVSS 2.0
5.0
MediumMetricsAV:N/AC:L/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions
Oracle Java SE versions 7 Update 21 and earlier
Oracle Java SE versions 6 Update 45 and earlier
Description
The issue affects the integrity of the system via vectors related to JMX, potentially allowing remote attackers to exploit it. It is noted that the problem might be due to a missing check for
package access by the MBeanServer Introspector, although Oracle has not commented on these claims.Recommendations
For Oracle Java SE versions 7 Update 21 and earlier, update to a version later than Update 21.
For Oracle Java SE versions 6 Update 45 and earlier, update to a version later than Update 45.
Found an issue in the description? Have something to add? Feel free to write us 👾