Lucene search

[email protected]NVD:CVE-2017-10388

HistoryOct 19, 2017 - 5:29 p.m.

CVE-2017-10388

2017-10-1917:29:05

[email protected]

web.nvd.nist.gov

CVSS2

5.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

7.8

Confidence

High

EPSS

0.003

Percentile

71.9%

JSON

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Kerberos to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: Applies to the Java SE Kerberos client. CVSS 3.0 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H).

Affected configurations

Nvd

Node

oraclejdkMatch1.6.0update161

oraclejdkMatch1.7.0update151

oraclejdkMatch1.8.0update144

oraclejdkMatch1.9.0

oraclejreMatch1.6.0update161

oraclejreMatch1.7.0update151

oraclejreMatch1.8.0update144

oraclejreMatch1.9.0

Node

redhatsatelliteMatch5.8

redhatenterprise_linux_desktopMatch6.0

redhatenterprise_linux_desktopMatch7.0

redhatenterprise_linux_eusMatch7.4

redhatenterprise_linux_eusMatch7.5

redhatenterprise_linux_eusMatch7.6

redhatenterprise_linux_eusMatch7.7

redhatenterprise_linux_serverMatch6.0

redhatenterprise_linux_serverMatch7.0

redhatenterprise_linux_server_ausMatch7.4

redhatenterprise_linux_server_ausMatch7.6

redhatenterprise_linux_server_ausMatch7.7

redhatenterprise_linux_server_tusMatch7.4

redhatenterprise_linux_server_tusMatch7.6

redhatenterprise_linux_server_tusMatch7.7

redhatenterprise_linux_workstationMatch6.0

redhatenterprise_linux_workstationMatch7.0

Node

netappactive_iq_unified_managerRange7.3≥windows

netappactive_iq_unified_managerRange9.5≥vmware_vsphere

netappcloud_backupMatch-

netappe-series_santricity_management_plug-insMatch-vmware_vcenter

netappe-series_santricity_os_controllerRange11.0–11.70.1

netappe-series_santricity_storage_managerMatch-

netappe-series_santricity_web_servicesMatch-web_services_proxy

netappelement_softwareMatch-

netapponcommand_balanceMatch-

netapponcommand_insightMatch-

netapponcommand_performance_managerMatch-vmware_vsphere

netapponcommand_shiftMatch-

netapponcommand_unified_managerRange≤7.1vsphere

netapponcommand_unified_managerRange≤7.1windows

netapponcommand_unified_managerMatch-7-mode

netapponcommand_workflow_automationMatch-

netappplug-in_for_symantec_netbackupMatch-

netappsnapmanagerMatch-oracle

netappsnapmanagerMatch-sap

netappsteelstore_cloud_integrated_storageMatch-

netappstorage_replication_adapter_for_clustered_data_ontapRange7.2≥vmware_vsphere

netappstorage_replication_adapter_for_clustered_data_ontapRange7.2≥windows

netappvasa_provider_for_clustered_data_ontapRange7.2≥

netappvasa_provider_for_clustered_data_ontapMatch6.0

netappvirtual_storage_consoleRange7.2≥vmware_vsphere

netappvirtual_storage_consoleMatch6.0vmware_vsphere

Node

debiandebian_linuxMatch7.0

debiandebian_linuxMatch8.0

debiandebian_linuxMatch9.0

VendorProductVersionCPE
oraclejdk1.6.0cpe:2.3:a:oracle:jdk:1.6.0:update161:*:*:*:*:*:*
oraclejdk1.7.0cpe:2.3:a:oracle:jdk:1.7.0:update151:*:*:*:*:*:*
oraclejdk1.8.0cpe:2.3:a:oracle:jdk:1.8.0:update144:*:*:*:*:*:*
oraclejdk1.9.0cpe:2.3:a:oracle:jdk:1.9.0:*:*:*:*:*:*:*
oraclejre1.6.0cpe:2.3:a:oracle:jre:1.6.0:update161:*:*:*:*:*:*
oraclejre1.7.0cpe:2.3:a:oracle:jre:1.7.0:update151:*:*:*:*:*:*
oraclejre1.8.0cpe:2.3:a:oracle:jre:1.8.0:update144:*:*:*:*:*:*
oraclejre1.9.0cpe:2.3:a:oracle:jre:1.9.0:*:*:*:*:*:*:*
redhatsatellite5.8cpe:2.3:a:redhat:satellite:5.8:*:*:*:*:*:*:*
redhatenterprise_linux_desktop6.0cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
oracle	jdk	1.6.0	cpe:2.3:a:oracle:jdk:1.6.0:update161::::::
oracle	jdk	1.7.0	cpe:2.3:a:oracle:jdk:1.7.0:update151::::::
oracle	jdk	1.8.0	cpe:2.3:a:oracle:jdk:1.8.0:update144::::::
oracle	jdk	1.9.0	cpe:2.3:a:oracle:jdk:1.9.0:::::::*
oracle	jre	1.6.0	cpe:2.3:a:oracle:jre:1.6.0:update161::::::
oracle	jre	1.7.0	cpe:2.3:a:oracle:jre:1.7.0:update151::::::
oracle	jre	1.8.0	cpe:2.3:a:oracle:jre:1.8.0:update144::::::
oracle	jre	1.9.0	cpe:2.3:a:oracle:jre:1.9.0:::::::*
redhat	satellite	5.8	cpe:2.3:a:redhat:satellite:5.8:::::::*
redhat	enterprise_linux_desktop	6.0	cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:::::::*