First published: Thu Oct 19 2017(Updated: )
Vulnerability in the Java Advanced Management Console component of Oracle Java SE (subcomponent: Server). The supported version that is affected is Java Advanced Management Console: 2.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java Advanced Management Console. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java Advanced Management Console. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).
Credit: secalert_us@oracle.com
Affected Software | Affected Version | How to fix |
---|---|---|
Oracle Java Advanced Management Console | =2.7 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2017-10342 has a CVSS score indicating it is a critical vulnerability that can be easily exploited.
To fix CVE-2017-10342, upgrade to the latest version of Oracle Java Advanced Management Console beyond version 2.7.
CVE-2017-10342 can be exploited by unauthenticated attackers with network access using multiple protocols.
CVE-2017-10342 is specifically found in Oracle Java Advanced Management Console version 2.7.
Yes, CVE-2017-10342 remains a threat if the affected software is still in use without proper updates.