Authorization Bypass

🗓️ 17 Jan 2020 01:47:11Reported by Veracode Vulnerability DatabaseType

veracode

veracode🔗 sca.analysiscenter.veracode.com👁 26 Views

openjdk authorization bypass vulnerabilit

Reporter	Title	Published	Views	Family All 103
ALT Linux	Security fix for the ALT Linux 10 package java-11-openjdk version 0:11.0.12.7-alt1_0jpp10	25 Aug 202100:00	–	altlinux
IBM Security Bulletins	Security Bulletin: Watson Machine Learning Service is impacted by security vulnerabilities in OpenJDK 11	31 Jul 202022:02	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in OpenJDK version 8 affect IBM InfoSphere Information Server	1 Apr 202120:45	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Open JDK affecting Rational Functional Tester	29 Jan 202116:55	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in OpenJDK version 11 affect IBM InfoSphere Information Server	1 Apr 202120:28	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in Java	19 Jun 202005:06	–	ibm
Tenable Nessus	Amazon Linux 2 : java-11-amazon-corretto (ALAS-2020-1387)	21 Jan 202000:00	–	nessus
Tenable Nessus	Amazon Corretto Java 11.x < 11.0.6.10.1 Multiple Vulnerabilities	1 Apr 202200:00	–	nessus
Tenable Nessus	Amazon Corretto Java 8.x < 8.242.07.1 Multiple Vulnerabilities	1 Apr 202200:00	–	nessus
Tenable Nessus	CentOS 8 : java-11-openjdk (CESA-2020:0128)	1 Feb 202100:00	–	nessus

Vulners

Node

java-11-openjdk java-11-openjdkMatch11.0.5.10_0.el7_7

OR

java-11-openjdk java-11-openjdkMatch11.0.2.7_0.el7_6

OR

java-11-openjdk java-11-openjdkMatch11.0.ea.28_7.el7

OR

java-11-openjdk java-11-openjdkMatch11.0.4.11_1.el7_7

OR

java-11-openjdk java-11-openjdkMatch11.0.4.11_0.el7_6

OR

java-11-openjdk java-11-openjdkMatch11.0.3.7_1.el7

OR

java-11-openjdk java-11-openjdkMatch11.0.1.13_3.el7_6

OR

java-11-openjdk java-11-openjdkMatch11.0.3.7_0.el7_6

OR

java-11-openjdk java-11-openjdkMatch11.0.3.7_2.el8_0

OR

java-11-openjdk java-11-openjdkMatch11.0.5.10_0.el8_0

OR

java-11-openjdk java-11-openjdkMatch11.0.2.7_2.el8

OR

java-11-openjdk java-11-openjdkMatch11.0.4.11_0.el8_0

OR

java-11-openjdk java-11-openjdkMatch11.0.5.10_2.el8_1

Source	Link
seclists	www.seclists.org/bugtraq/2020/Jan/24
access	www.access.redhat.com/errata/RHSA-2020:0122
access	www.access.redhat.com/security/updates/classification/
debian	www.debian.org/security/2020/dsa-4605
security	www.security.netapp.com/advisory/ntap-20200122-0003/
oracle	www.oracle.com/security-alerts/cpujan2020.html
lists	www.lists.opensuse.org/opensuse-security-announce/2020-01/msg00050.html
access	www.access.redhat.com/errata/RHSA-2020:0128
access	www.access.redhat.com/errata/RHSA-2020:0232
usn	www.usn.ubuntu.com/4257-1/

28 Jan 2020 16:35Current

3.6Low risk

Vulners AI Score3.6

CVSS 34.8

CVSS 25.8

EPSS0.02147

SSVC

openjdk authorization bypass vulnerability software tls handshake attacker unauthorized access data manipulation certificateverify.