PT-2013-3787

CVE-2013-2453

·

Published

2013-06-18

·

Updated

2024-06-15

Description by

CVSS 2.0
5.0
Medium
MetricsAV:N/AC:L/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 7 Update 21 and earlier Oracle Java SE versions 6 Update 45 and earlier
Description The issue affects the integrity of the system via vectors related to JMX, potentially allowing remote attackers to exploit it. It is noted that the problem might be due to a missing check for package access by the MBeanServer Introspector, although Oracle has not commented on these claims.
Recommendations For Oracle Java SE versions 7 Update 21 and earlier, update to a version later than Update 21. For Oracle Java SE versions 6 Update 45 and earlier, update to a version later than Update 45.
Exploitability
Exploit
Fix
Vendors
Affected products
Related identifiers
CESA-2013_0957
CESA-2013_1014
DSA-2722-1
DSA-2727-1
HPSBUX02907
HPSBUX02908
MGASA-2013-0185
MGASA-2013-0208
OPENSUSE-SU-2024:10534-1
RHSA-2013:0957
RHSA-2013_0957
RHSA-2013:0958
RHSA-2013_0958
RHSA-2013:0963
RHSA-2013_0963
RHSA-2013:1014
RHSA-2013_1014
RHSA-2013:1059
RHSA-2013_1059
RHSA-2013:1060
RHSA-2013_1060
RHSA-2013:1455
RHSA-2013:1456
RHSA-2014:0414
RHSA-2014_0414
Found an issue in the description? Have something to add? Feel free to write us 👾