Sandbox Restrictions Bypass

🗓️ 15 Jan 2019 08:56:26Reported by Veracode Vulnerability DatabaseType

veracode

veracode🔗 sca.analysiscenter.veracode.com👁 23 Views

openjdk vulnerability sandbox bypass improper permission checks untrusted apple

Reporter	Title	Published	Views	Family All 86
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect WebSphere Application Server July 2014 CPU	15 Jun 201807:01	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Support Assistant Team Server July 2014 CPU	15 Jun 201807:01	–	ibm
IBM Security Bulletins	Security Bulletin: July 2014 Java Runtime Environment (JRE) Vulnerabilities in Multiple N series Products	18 Jun 201800:32	–	ibm
Tenable Nessus	Oracle Java Update (July 2014) Multiple Vulnerabilities	23 Jul 201400:00	–	nessus
Tenable Nessus	Amazon Linux AMI : java-1.7.0-openjdk (ALAS-2014-383)	12 Oct 201400:00	–	nessus
Tenable Nessus	CentOS 6 / 7 : java-1.7.0-openjdk (CESA-2014:0889)	17 Jul 201400:00	–	nessus
Tenable Nessus	CentOS 5 : java-1.7.0-openjdk (CESA-2014:0890)	17 Jul 201400:00	–	nessus
Tenable Nessus	Debian DSA-2987-1 : openjdk-7 - security update	26 Jul 201400:00	–	nessus
Tenable Nessus	GLSA-201502-12 : Oracle JRE/JDK: Multiple vulnerabilities	16 Feb 201500:00	–	nessus
Tenable Nessus	Mandriva Linux Security Advisory : java-1.7.0-openjdk (MDVSA-2014:141)	30 Jul 201400:00	–	nessus

Vulners

Node

java-1.7.0-openjdk java-1.7.0-openjdkMatch1.7.0.45_2.4.3.4.el6_5

OR

java-1.7.0-openjdk java-1.7.0-openjdkMatch1.7.0.45_2.4.3.2.el6_4

OR

java-1.7.0-openjdk java-1.7.0-openjdkMatch1.7.0.55_2.4.7.1.el6_5

OR

java-1.7.0-openjdk java-1.7.0-openjdkMatch1.7.0.5_2.2.1.el6_3.3

OR

java-1.7.0-openjdk java-1.7.0-openjdkMatch1.7.0.51_2.4.4.1.el6_5

OR

java-1.7.0-openjdk java-1.7.0-openjdkMatch1.7.0.25_2.3.10.4.el6_4

OR

java-1.7.0-openjdk java-1.7.0-openjdkMatch1.7.0.19_2.3.9.1.el6_4

OR

java-1.7.0-openjdk java-1.7.0-openjdkMatch1.7.0.9_2.3.4.1.el6_3

OR

java-1.7.0-openjdk java-1.7.0-openjdkMatch1.7.0.5_2.2.1.el6_3

OR

java-1.7.0-openjdk java-1.7.0-openjdkMatch1.7.0.3_2.1.el6.7

OR

java-1.7.0-openjdk java-1.7.0-openjdkMatch1.7.0.25_2.3.10.3.el6_4

OR

java-1.7.0-openjdk java-1.7.0-openjdkMatch1.7.0.9_2.3.8.0.el6_4

OR

java-1.7.0-openjdk java-1.7.0-openjdkMatch1.7.0.9_2.3.5.3.el6_3

OR

java-1.7.0-openjdk java-1.7.0-openjdkMatch1.7.0.45_2.4.3.3.el6

OR

java-1.7.0-openjdk java-1.7.0-openjdkMatch1.7.0.9_2.3.7.1.el6_3

OR

java-1.7.0-openjdk java-1.7.0-openjdkMatch1.7.0.9_2.3.3.el6_3.1

OR

java-1.7.0-openjdk java-1.7.0-openjdkMatch1.7.0.9_2.3.3.2.el6_3

OR

java-1.7.0-openjdk java-1.7.0-openjdkMatch1.7.0.9_2.3.4.el5_9.1

OR

java-1.7.0-openjdk java-1.7.0-openjdkMatch1.7.0.9_2.3.3.el5.1

OR

java-1.7.0-openjdk java-1.7.0-openjdkMatch1.7.0.9_2.3.5.3.el5_9

OR

java-1.7.0-openjdk java-1.7.0-openjdkMatch1.7.0.55_2.4.7.1.el5_10

OR

java-1.7.0-openjdk java-1.7.0-openjdkMatch1.7.0.51_2.4.4.2.el5_10

OR

java-1.7.0-openjdk java-1.7.0-openjdkMatch1.7.0.9_2.3.8.0.el5_9

OR

java-1.7.0-openjdk java-1.7.0-openjdkMatch1.7.0.19_2.3.9.1.el5_9

OR

java-1.7.0-openjdk java-1.7.0-openjdkMatch1.7.0.55_2.4.7.2.el5_10

OR

java-1.7.0-openjdk java-1.7.0-openjdkMatch1.7.0.25_2.3.10.5.el5_9

OR

java-1.7.0-openjdk java-1.7.0-openjdkMatch1.7.0.9_2.3.7.1.el5_9

OR

java-1.7.0-openjdk java-1.7.0-openjdkMatch1.7.0.25_2.3.10.4.el5_9

OR

java-1.7.0-openjdk java-1.7.0-openjdkMatch1.7.0.51_2.4.4.1.el5_10

OR

java-1.7.0-openjdk java-1.7.0-openjdkMatch1.7.0.45_2.4.3.1.el5_10

Source	Link
securitytracker	www.securitytracker.com/id/1030577
securityfocus	www.securityfocus.com/archive/1/534161/100/0/threaded
seclists	www.seclists.org/fulldisclosure/2014/Dec/23
secunia	www.secunia.com/advisories/60485
secunia	www.secunia.com/advisories/60812
securityfocus	www.securityfocus.com/bid/68608
rhn	www.rhn.redhat.com/errata/RHSA-2014-0889.html
access	www.access.redhat.com/security/updates/classification/
debian	www.debian.org/security/2014/dsa-2987
security	www.security.gentoo.org/glsa/glsa-201502-12.xml

13 May 2022 16:37Current

6Medium risk

Vulners AI Score6

CVSS 29.3

EPSS0.05233

openjdk vulnerability sandbox bypass improper permission untrusted applet unauthorized actions