Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:23836
HistoryApr 10, 2020 - 12:37 a.m.

Access Control Bypass

2020-04-1000:37:28
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9

5.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

java is vulnerable to access control bypass. Javascript loaded from localhost is not restricted from connecting to other ports on the system, allowing access restrictions bypass via LiveConnect.

References

5.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N