CVE-2018-2811: High severity oracle java se 7 vulnerability
Oracle Java SE 8u171 and 10.0.1 fixes an unspecified vulnerability in the Install component (CVE-2018-2811). Upstream has CVSS scored this issue as: 7.7/CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
External Reference:
http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html#AppendixJAVA
Other sources
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Install). Supported versions that are affected are Java SE: 8u162 and 10. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Java SE executes to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: Applies to installation process on client deployment of Java. CVSS 3.0 Base Score 7.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).
— MITRE
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2018-2811?
CVE-2018-2811 is a vulnerability in the Java SE component of Oracle Java SE that affects versions 8u162 and 10.
What is the severity of CVE-2018-2811?
CVE-2018-2811 has a severity rating of 7.7 (high).
How does CVE-2018-2811 affect Oracle JDK?
CVE-2018-2811 affects Oracle JDK version 1.8.0-update162 and 1.10.0.
How does CVE-2018-2811 affect Oracle JRE?
CVE-2018-2811 affects Oracle JRE version 1.8.0-update162 and 1.10.0.
How does CVE-2018-2811 affect Redhat Enterprise Linux Server?
CVE-2018-2811 affects Redhat Enterprise Linux Server version 6.0 and 7.0.
How does CVE-2018-2811 affect Redhat Enterprise Linux Workstation?
CVE-2018-2811 affects Redhat Enterprise Linux Workstation version 6.0 and 7.0.
How does CVE-2018-2811 affect Schneider-electric Struxureware Data Center Expert?
CVE-2018-2811 affects Schneider-electric Struxureware Data Center Expert up to version 7.6.0.
Where can I find more information about CVE-2018-2811?
More information about CVE-2018-2811 can be found on the Oracle website and security advisory links provided: [Oracle website](http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html), [SecurityFocus](http://www.securityfocus.com/bid/103810), [SecurityTracker](http://www.securitytracker.com/id/1040697).