Authorization Bypass

2019-01-1508:53:56

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

JSON

OpenJDK is vulnerable to authorization bypass. An improper permission check in the reflection API allows a remote attacker to bypass the Java sandbox restrictions and obtain unauthorized access to resources.

CPENameOperatorVersion
java-1.7.0-openjdkeq1.7.0.9__2.3.3.el6_3.1
java-1.7.0-openjdkeq1.7.0.9__2.3.3.el5.1
java-1.7.0-openjdkeq1.7.0.9__2.3.3.2.el6_3
java-1.7.0-openjdkeq1.7.0.5__2.2.1.el6_3
java-1.7.0-openjdkeq1.7.0.5__2.2.1.el6_3.3
java-1.7.0-openjdkeq1.7.0.3__2.1.el6.7

Name	Operator	Version
java-1.7.0-openjdk	eq	1.7.0.9__2.3.3.el6_3.1
java-1.7.0-openjdk	eq	1.7.0.9__2.3.3.el5.1
java-1.7.0-openjdk	eq	1.7.0.9__2.3.3.2.el6_3
java-1.7.0-openjdk	eq	1.7.0.5__2.2.1.el6_3
java-1.7.0-openjdk	eq	1.7.0.5__2.2.1.el6_3.3
java-1.7.0-openjdk	eq	1.7.0.3__2.1.el6.7