Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:14858
HistoryMay 02, 2019 - 4:56 a.m.

Authorization Bypass

2019-05-0204:56:13
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

java is vulnerable to authorization bypass. The vulnerability exists as CanonicalizerBase.java allows untrusted code to access mutable byte arrays.

References

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N