Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2015-5234
HistoryOct 09, 2015 - 2:59 p.m.

CVE-2015-5234

2015-10-0914:59:01
CWE-20
[email protected]
web.nvd.nist.gov
1

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

6.7 Medium

AI Score

Confidence

Low

0.007 Low

EPSS

Percentile

80.3%

JSON

IcedTea-Web before 1.5.3 and 1.6.x before 1.6.1 does not properly sanitize applet URLs, which allows remote attackers to inject applets into the .appletTrustSettings configuration file and bypass user approval to execute the applet via a crafted web page, possibly related to line breaks.

Affected configurations

NVD
Node
redhatenterprise_linux_desktopMatch6.0
OR
redhatenterprise_linux_hpc_nodeMatch6.0
OR
redhatenterprise_linux_serverMatch6.0
OR
redhatenterprise_linux_workstationMatch6.0
Node
opensuseopensuseMatch13.1
OR
opensuseopensuseMatch13.2
Node
redhaticedteaRange≤1.5.2
OR
redhaticedteaMatch1.6
Node
fedoraprojectfedoraMatch21
OR
fedoraprojectfedoraMatch22

Related

debiancve 1
prion 1
cvelist 1
cve 1
ubuntucve 1
veracode 1
nessus 10
ubuntu 1
mageia 1
archlinux 1
oraclelinux 1
openvas 4
centos 1
redhat 1
suse 1
debiancve
debiancve
CVE-2015-5234
2015-10-09 14:59:01
prion
prion
Privilege escalation
2015-10-09 14:59:00
cvelist
cvelist
CVE-2015-5234
2015-10-09 14:00:00
cve
cve
CVE-2015-5234
2015-10-09 14:59:01
ubuntucve
ubuntucve
CVE-2015-5234
2015-10-09 00:00:00
veracode
veracode
Authorization Bypass
2019-01-15 09:11:15
nessus
nessus
Fedora 21 : icedtea-web-1.6.1-1.fc21 (2015-15677)
2015-09-22 00:00:00
Fedora 22 : icedtea-web-1.6.1-1.fc22 (2015-15676)
2015-09-22 00:00:00
Ubuntu 14.04 LTS : IcedTea Web vulnerabilities (USN-2817-1)
2015-11-25 00:00:00
ubuntu
ubuntu
IcedTea Web vulnerabilities
2015-11-24 00:00:00
mageia
mageia
Updated icedtea-web packages fix security vulnerabilities
2015-09-17 21:02:40
archlinux
archlinux
icedtea-web: multiple issues
2015-09-14 00:00:00
oraclelinux
oraclelinux
icedtea-web security, bug fix, and enhancement update
2016-05-12 00:00:00
openvas
openvas
Mageia: Security Advisory (MGASA-2015-0376)
2015-10-15 00:00:00
Ubuntu: Security Advisory (USN-2817-1)
2015-11-25 00:00:00
RedHat Update for icedtea-web RHSA-2016:0778-01
2016-05-11 00:00:00
centos
centos
icedtea security update
2016-05-16 10:15:12
redhat
redhat
(RHSA-2016:0778) Moderate: icedtea-web security, bug fix, and enhancement update
2016-05-10 06:42:20
suse
suse
Security update for icedtea-web (important)
2015-09-22 11:10:12

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

6.7 Medium

AI Score

Confidence

Low

0.007 Low

EPSS

Percentile

80.3%

JSON
Related for NVD:CVE-2015-5234
debiancve1prion1cvelist1cve1ubuntucve1veracode1nessus10ubuntu1mageia1archlinux1oraclelinux1openvas4centos1redhat1suse1