Ubuntu.comUB:CVE-2020-2800CVE-2020-2800
4.8 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
5.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:P/A:N
0.001 Low
EPSS
Percentile
41.2%
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE
(component: Lightweight HTTP Server). Supported versions that are affected
are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241.
Difficult to exploit vulnerability allows unauthenticated attacker with
network access via multiple protocols to compromise Java SE, Java SE
Embedded. Successful attacks of this vulnerability can result in
unauthorized update, insert or delete access to some of Java SE, Java SE
Embedded accessible data as well as unauthorized read access to a subset of
Java SE, Java SE Embedded accessible data. Note: This vulnerability can
only be exploited by supplying data to APIs in the specified Component
without using Untrusted Java Web Start applications or Untrusted Java
applets, such as through a web service. CVSS 3.0 Base Score 4.8
(Confidentiality and Integrity impacts). CVSS Vector:
(CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 20.04 | noarch | openjdk-14 | < 14.0.1+7-1ubuntu1 | UNKNOWN |
| ubuntu | 18.04 | noarch | openjdk-8 | < 8u252-b09-1~18.04 | UNKNOWN |
| ubuntu | 19.10 | noarch | openjdk-8 | < 8u252-b09-1~19.10 | UNKNOWN |
| ubuntu | 16.04 | noarch | openjdk-8 | < 8u252-b09-1~16.04 | UNKNOWN |
| ubuntu | 18.04 | noarch | openjdk-lts | < 11.0.7+10-2ubuntu2~18.04 | UNKNOWN |
| ubuntu | 19.10 | noarch | openjdk-lts | < 11.0.7+10-2ubuntu2~19.10 | UNKNOWN |
| ubuntu | 20.04 | noarch | openjdk-lts | < 11.0.7+10-2ubuntu1 | UNKNOWN |
Related
4.8 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
5.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:P/A:N
0.001 Low
EPSS
Percentile
41.2%