5.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N
2.6 Low
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:H/Au:N/C:N/I:P/A:N
java is vulnerable to authorization bypass. A difficult to exploit vulnerability allows unauthenticated attacker with network access to affect intgrity of the system. The attack requires human interaction from a person other than the attacker.
access.redhat.com/errata/RHSA-2021:1315
access.redhat.com/security/updates/classification/#moderate
bugzilla.redhat.com/show_bug.cgi?id=1951217
lists.debian.org/debian-lts-announce/2021/04/msg00021.html
lists.fedoraproject.org/archives/list/[email protected]/message/5ACX4JEVYH6H4PSMGMYWTGABPOFPH3TS/
lists.fedoraproject.org/archives/list/[email protected]/message/CFXOKM2233JVGYDOWW77BN54X3GZTIBK/
lists.fedoraproject.org/archives/list/[email protected]/message/CG7EWXSO6JUCVHP7R3SOZQ7WPNBOISJH/
lists.fedoraproject.org/archives/list/[email protected]/message/MAULPCQFLAMBJIS27YLNNX6IHRFJMVP4/
lists.fedoraproject.org/archives/list/[email protected]/message/MVDY4T5XMSYDQT6RRKPMRCV4MVGS7KXF/
lists.fedoraproject.org/archives/list/[email protected]/message/UD3JEP4HPLK7MNZHVUMKIJPBP74M3A2V/
security.netapp.com/advisory/ntap-20210513-0001/
www.debian.org/security/2021/dsa-4899
www.oracle.com/security-alerts/cpuapr2021.html
5.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N
2.6 Low
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:H/Au:N/C:N/I:P/A:N