CVE-2015-4860: Critical severity oracle java se 7 vulnerability
It was discovered that the DGCImpl (for RMI distributed garbage-collection - DGC) class in the RMI component of OpenJDK failed to use restricted access control context when processing untrusted input. An untrusted Java application or applet could use this flaw to bypass Java sandbox restrictions.
Other sources
Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to RMI, a different vulnerability than CVE-2015-4883.
— MITRE
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2015-4860?
CVE-2015-4860 is considered to have a high severity level due to its potential impact on confidentiality, integrity, and availability.
How do I fix CVE-2015-4860?
To fix CVE-2015-4860, update your Oracle Java JDK and JRE to the latest patched versions available.
What software is affected by CVE-2015-4860?
CVE-2015-4860 affects Oracle Java SE 6u101, 7u85, and 8u60, as well as Java SE Embedded 8u51.
What types of attacks does CVE-2015-4860 allow?
CVE-2015-4860 allows remote attackers to potentially breach confidentiality, integrity, and availability through specific Remote Method Invocation (RMI) vulnerabilities.
Is CVE-2015-4860 related to other vulnerabilities?
Yes, CVE-2015-4860 is a different vulnerability than CVE-2015-4883 despite both being related to RMI issues.