Lucene search
PRIOn knowledge basePRION:CVE-2015-5236HistoryJul 07, 2022 - 4:15 p.m.
Design/Logic Flaw
2022-07-0716:15:00
PRIOn knowledge base
www.prio-n.com
5
It was discovered that the IcedTea-Web used codebase attribute of the <applet> tag on the HTML page that hosts Java applet in the Same Origin Policy (SOP) checks. As the specified codebase does not have to match the applet’s actual origin, this allowed malicious site to bypass SOP via spoofed codebase value.
Related
ubuntucve
ubuntucve
CVE-2015-5236
2022-07-07 00:00:00
cvelist
cvelist
CVE-2015-5236
2022-07-07 15:54:03
nessus
nessus
RHEL 7 : icedtea-web (Unpatched Vulnerability)
2024-06-03 00:00:00
RHEL 6 : icedtea-web (Unpatched Vulnerability)
2024-06-03 00:00:00
osv
osv
CVE-2015-5236
2022-07-07 16:15:08
cve
cve
CVE-2015-5236
2022-07-07 16:15:08
redhatcve
redhatcve
CVE-2015-5236
2021-11-11 22:23:55
debiancve
debiancve
CVE-2015-5236
2022-07-07 16:15:08
nvd
nvd
CVE-2015-5236
2022-07-07 16:15:08