Lucene search

K
freebsdFreeBSDC93E4D41-75C5-11DC-B903-0016179B2DD5
HistoryOct 03, 2007 - 12:00 a.m.

jdk/jre -- Applet Caching May Allow Network Access Restrictions to be Circumvented

2007-10-0300:00:00
vuxml.freebsd.org
12

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:P/I:P/A:N

0.027 Low

EPSS

Percentile

90.3%

SUN reports:

A vulnerability in the Java Runtime Environment (JRE) with applet
caching may allow an untrusted applet that is downloaded from a
malicious website to make network connections to network services
on machines other than the one that the applet was downloaded from.
This may allow network resources (such as web pages) and
vulnerabilities (that exist on these network services) which are not
otherwise normally accessible to be accessed or exploited.

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:P/I:P/A:N

0.027 Low

EPSS

Percentile

90.3%