Executive Summary

Informations
NameCVE-2019-2426First vendor Publication2019-01-16
VendorCveLast vendor Modification2019-06-03

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:M/Au:N/C:P/I:N/A:N)
Cvss Base Score4.3Attack RangeNetwork
Cvss Impact Score2.9Attack ComplexityMedium
Cvss Expoit Score8.6AuthenticationNone Required
Calculate full CVSS 2.0 Vectors scores

Detail

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 7u201, 8u192 and 11.0.1; Java SE Embedded: 8u191. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2426

CWE : Common Weakness Enumeration

%idName
100 %CWE-284Access Control (Authorization) Issues

CPE : Common Platform Enumeration

TypeDescriptionCount
Application1
Application1
Application2
Application4
Application4

Sources (Detail)

SourceUrl
BID http://www.securityfocus.com/bid/106590
CONFIRM http://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html
https://security.netapp.com/advisory/ntap-20190118-0001/
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr...
GENTOO https://security.gentoo.org/glsa/201903-14
SUSE http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00059.html
http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00013.html

Alert History

If you want to see full details history, please login or register.
0
1
2
3
4
5
6
7
8
9
DateInformations
2019-10-03 12:11:07
  • Multiple Updates
2019-06-03 21:19:21
  • Multiple Updates
2019-05-23 21:19:23
  • Multiple Updates
2019-05-09 21:19:44
  • Multiple Updates
2019-03-14 21:19:51
  • Multiple Updates
2019-03-14 13:19:45
  • Multiple Updates
2019-01-21 05:18:35
  • Multiple Updates
2019-01-18 21:19:32
  • Multiple Updates
2019-01-17 17:19:03
  • Multiple Updates
2019-01-17 00:19:30
  • First insertion