The vulnerability of the Libraries component of the Oracle Java SE software platform and the Oracle GraalVM Enterprise Edition virtual machine allows attackers to disclose protected information.

🗓️ 14 Aug 2023 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 5 Views

Oracle Java Libraries and GraalVM Enterprise Edition have authentication flaws enabling disclosure of protected data.

Reporter	Title	Published	Views	Family All 266
IBM Security Bulletins	Security Bulletin: Cloud Pak for Security vulnerable to information exposure (CVE-2021-35567)	18 Feb 202208:34	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Tivoli System Automation for Multiplatforms Nov 2021 CPU (CVE-2021-41035, CVE-2021-35578, CVE-2021-35586, CVE-2021-35564, CVE-2021-35561, CVE-2021-35565, CVE-2021-35567)	4 Mar 202211:16	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities may affect IBM® Semeru Runtime	2 Dec 202116:09	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Tivoli System Automation Application Manager Nov 2021 CPU (CVE-2021-41035, CVE-2021-35578, CVE-2021-35586, CVE-2021-35564, CVE-2021-35561, CVE-2021-35565, CVE-2021-35567)	4 Mar 202211:03	–	ibm
ALT Linux	Security fix for the ALT Linux 10 package java-11-openjdk version 0:11.0.13.8-alt1_1jpp11	8 Nov 202100:00	–	altlinux
Tenable Nessus	Amazon Linux 2 : java-11-amazon-corretto (ALAS-2021-1718)	5 Nov 202100:00	–	nessus
Tenable Nessus	Amazon Linux 2 : java-1.8.0-openjdk (ALAS-2021-1726)	13 Dec 202100:00	–	nessus
Tenable Nessus	Amazon Linux 2 : java-1.8.0-amazon-corretto (ALASCORRETTO8-2024-012)	31 May 202400:00	–	nessus
Tenable Nessus	Amazon Linux 2 : java-11-openjdk (ALASJAVA-OPENJDK11-2024-009)	31 May 202400:00	–	nessus
Tenable Nessus	Amazon Linux AMI : java-1.8.0-openjdk (ALAS-2022-1561)	19 Jan 202200:00	–	nessus

Vulners

Node

red_hat red_hat_build_of_openjdkMatch11

OR

red_hat red_hat_build_of_openjdkMatch17

OR

red_hat red_hat_build_of_openjdkMatch1.8

OR

oracle java_seMatch8u301

OR

oracle graalvm_enterprise_editionMatch20.3.3

OR

oracle graalvm_enterprise_editionMatch21.2.0

OR

oracle java_seMatch11.0.12

OR

oracle openjdkMatch8u302

OR

oracle openjdkMatch11.0.12

OR

oracle openjdkMatch13.0.8

OR

oracle openjdkMatch15.0.4

OR

oracle openjdkMatch16.0.2

OR

oracle java_seMatch17

OR

oracle openjdkRange≤7u311

OR

red_hat red_hat_enterprise_linuxMatch7

OR

red_hat red_hat_enterprise_linuxMatch8

OR

novell suse_linux_enterprise_server_for_sap_applicationsMatch15

OR

novell suse_linux_enterprise_serverMatch15-ltss

OR

novell opensuse_leapMatch15.2

OR

fedora fedoraMatch33

OR

canonical ubuntuMatch21.04

OR

fedora fedoraMatch34

OR

novell opensuse_leapMatch15.3

OR

fedora fedoraMatch35

OR

canonical ubuntuMatch21.10

OR

novell opensuse_leapMatch15.4

OR

novell suse_linux_enterprise_serverMatch15

OR

novell suse_linux_enterprise_desktopMatch15

Source	Link
oracle	www.oracle.com/security-alerts/cpuoct2021.html
openjdk	www.openjdk.org/groups/vulnerability/advisories/2021-10-19
security	www.security.netapp.com/advisory/ntap-20211022-0004/
suse	www.suse.com/security/cve/CVE-2021-35567.html
ubuntu	www.ubuntu.com/security/CVE-2021-35567
ubuntu	www.ubuntu.com/security/notices/USN-5202-1
security-tracker	www.security-tracker.debian.org/tracker/CVE-2021-35567
lists	www.lists.debian.org/debian-lts-announce/2021/11/msg00008.html
debian	www.debian.org/security/2021/dsa-5000
debian	www.debian.org/security/2021/dsa-5012

27 May 2024 00:00Current

7.1High risk

Vulners AI Score7.1

CVSS 26.8

CVSS 36.8

EPSS0.027

Oracle Java Libraries vulnerability authentication deficiency information disclosure graalvm enterprise edition sensitive information