CVE-2015-4868: High severity oracle java se 7 vulnerability
A flaw was found in the way the Libraries component of OpenJDK handled certificate revocation lists (CRL). In certain cases, CRL checking code could fail to report that a certificate was revoked, causing the application to accept it as trusted.
Other sources
Unspecified vulnerability in Oracle Java SE 8u60 and Java SE Embedded 8u51 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.
— MITRE
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2015-4868?
CVE-2015-4868 is considered a medium severity vulnerability.
How do I fix CVE-2015-4868?
To fix CVE-2015-4868, update to the latest version of Oracle JDK or JRE that addresses this vulnerability.
What versions are affected by CVE-2015-4868?
CVE-2015-4868 affects Oracle JDK versions 1.8.0-update51 and 1.8.0-update60, as well as corresponding JRE versions.
What impact does CVE-2015-4868 have on applications?
CVE-2015-4868 can allow applications to accept revoked certificates as trusted, potentially leading to security breaches.
Is there a patch available for CVE-2015-4868?
Yes, there are patches available in the later updates of Oracle JDK and JRE to mitigate the effects of CVE-2015-4868.