Veracode Vulnerability DatabaseVERACODE:19236Privilege Escalation
7.7 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
3.7 Low
CVSS2
Access Vector
LOCAL
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:H/Au:N/C:P/I:P/A:P
Oracle Java SE is vulnerable to privilege escalation vulnerability. An unauthenticated attacker with logon to the infrastructure where Java SE, JRockit executes could compromise Java SE, JRockit with the aid of human interaction from a person other than the attacker.
References
www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html
www.securityfocus.com/bid/103817
www.securitytracker.com/id/1040697
access.redhat.com/errata/RHSA-2018:1188
access.redhat.com/errata/RHSA-2018:1191
access.redhat.com/errata/RHSA-2018:1201
access.redhat.com/errata/RHSA-2018:1202
access.redhat.com/errata/RHSA-2018:1203
access.redhat.com/errata/RHSA-2018:1204
access.redhat.com/errata/RHSA-2018:1205
access.redhat.com/errata/RHSA-2018:1206
access.redhat.com/errata/RHSA-2018:1270
access.redhat.com/errata/RHSA-2018:1278
access.redhat.com/errata/RHSA-2018:1721
access.redhat.com/errata/RHSA-2018:1722
access.redhat.com/errata/RHSA-2018:1723
access.redhat.com/errata/RHSA-2018:1724
access.redhat.com/errata/RHSA-2018:1974
access.redhat.com/errata/RHSA-2018:1975
access.redhat.com/security/updates/classification/#critical
help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0
security.gentoo.org/glsa/201903-14
security.netapp.com/advisory/ntap-20180419-0001/
support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03857en_us
support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03915en_us
usn.ubuntu.com/3644-1/
usn.ubuntu.com/3691-1/
www.debian.org/security/2018/dsa-4185
www.debian.org/security/2018/dsa-4225
Related
7.7 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
3.7 Low
CVSS2
Access Vector
LOCAL
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:H/Au:N/C:P/I:P/A:P