Authorization Bypass

2019-05-0204:54:23

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

6.4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

JSON

openjdk is vulnerable to authorization bypass. An unspecified vulnerability allows remote attackers to affect confidentiality and integrity via unknown vectors related to Javadoc.

CPENameOperatorVersion
java-1.7.0-openjdkeq1.7.0.9__2.3.5.3.el6_3
java-1.7.0-openjdkeq1.7.0.9__2.3.3.2.el6_3
java-1.7.0-openjdkeq1.7.0.9__2.3.7.1.el5_9
java-1.7.0-openjdkeq1.7.0.9__2.3.8.0.el5_9
java-1.7.0-openjdkeq1.7.0.25__2.3.10.5.el5_9
java-1.7.0-openjdkeq1.7.0.25__2.3.10.4.el5_9
java-1.7.0-openjdkeq1.7.0.9__2.3.4.1.el6_3
java-1.7.0-openjdkeq1.7.0.5__2.2.1.el6_3
java-1.7.0-openjdkeq1.7.0.25__2.3.10.3.el6_4
java-1.7.0-openjdkeq1.7.0.19__2.3.9.1.el6_4

Name	Operator	Version
java-1.7.0-openjdk	eq	1.7.0.9__2.3.5.3.el6_3
java-1.7.0-openjdk	eq	1.7.0.9__2.3.3.2.el6_3
java-1.7.0-openjdk	eq	1.7.0.9__2.3.7.1.el5_9
java-1.7.0-openjdk	eq	1.7.0.9__2.3.8.0.el5_9
java-1.7.0-openjdk	eq	1.7.0.25__2.3.10.5.el5_9
java-1.7.0-openjdk	eq	1.7.0.25__2.3.10.4.el5_9
java-1.7.0-openjdk	eq	1.7.0.9__2.3.4.1.el6_3
java-1.7.0-openjdk	eq	1.7.0.5__2.2.1.el6_3
java-1.7.0-openjdk	eq	1.7.0.25__2.3.10.3.el6_4
java-1.7.0-openjdk	eq	1.7.0.19__2.3.9.1.el6_4