Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:14864
HistoryMay 02, 2019 - 4:56 a.m.

Authorization Bypass

2019-05-0204:56:14
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
2

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

java is vulnerable to authorization bypass. The vulnerability exists through an improper check for code permissions when creating DocumentBuilderFactory instances.

References

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N