PT-2014-1241
CVE-2014-2428
·
Published
2014-04-15
·
Updated
2022-05-13
Description by
CVSS 2.0
7.6
HighMetricsAV:N/AC:H/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Oracle Java SE versions 6u71 through 8
Java SE Embedded version 7u51
Description
The issue allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment. This can be exploited by remote attackers to disrupt the confidentiality, integrity, and availability of data.
Recommendations
For Oracle Java SE versions 6u71 through 8, update to a version that is not affected by this issue.
For Java SE Embedded version 7u51, update to a version that is not affected by this issue.
As a temporary workaround, consider restricting access to the Deployment component until a patch is available.
Found an issue in the description? Have something to add? Feel free to write us 👾