REDHAT-BUG-1273425: Medium severity OpenJDK JAXP vulnerability

Published Oct 20, 2015

Updated

An information disclosure flaw was found in the JAXP component of OpenJDK. An untrusted Java application or applet could use this flaw to get information about user home directory location (the content of the "user.dir" system property), hence bypassing certain Java sandbox restrictions.

Affected Software

1 affected component

OpenJDK JAXP

Event History

Oct 20, 2015

Data Sourced

via Red Hat·12:31 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-1273425?

The severity of REDHAT-BUG-1273425 is classified as moderate due to its potential for information disclosure.

How do I fix REDHAT-BUG-1273425?

To fix REDHAT-BUG-1273425, update to the latest version of OpenJDK that addresses this vulnerability.

What component is affected by REDHAT-BUG-1273425?

REDHAT-BUG-1273425 affects the JAXP component of OpenJDK.

What type of vulnerability is REDHAT-BUG-1273425?

REDHAT-BUG-1273425 is an information disclosure vulnerability that allows an untrusted Java application to access the user home directory.

Can REDHAT-BUG-1273425 be exploited remotely?

Yes, REDHAT-BUG-1273425 can potentially be exploited by untrusted Java applications or applets running in a vulnerable environment.