PT-2015-3901
CVE-2014-6593
·
Published
2015-01-20
·
Updated
2024-06-15
Description by
CVSS 2.0
4.0
MediumMetricsAV:N/AC:H/Au:N/C:P/I:P/A:N
Name of the Vulnerable Software and Affected Versions
Oracle Java SE versions 5.0u75, 6u85, 7u72, and 8u25
Oracle Java SE Embedded versions 7u71 and 8u6
JRockit versions 27.8.4 and 28.3.4
Description
The issue affects confidentiality and integrity, allowing remote attackers to exploit it via vectors related to JSSE.
Recommendations
For Oracle Java SE versions 5.0u75, 6u85, 7u72, and 8u25, update to a version that is not affected by this issue.
For Oracle Java SE Embedded versions 7u71 and 8u6, update to a version that is not affected by this issue.
For JRockit versions 27.8.4 and 28.3.4, update to a version that is not affected by this issue.
As a temporary workaround, consider restricting access to JSSE-related functionality until a patch is available.
Found an issue in the description? Have something to add? Feel free to write us 👾