REDHAT-BUG-1273734: Medium severity OpenJDK Security Component vulnerability

Published Oct 21, 2015

Updated

It was discovered that the AlgorithmChecker class in the Security component of OpenJDK failed to properly check if a certificate satisfies all defined constraints in certain cases. This could cause a Java application to accept an X.509 certificate which does not meet requirements of the policy defined in the java.security file.

Affected Software

1 affected component

OpenJDK Security Component

Event History

Oct 21, 2015

Data Sourced

via Red Hat·07:10 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-1273734?

The severity of REDHAT-BUG-1273734 is considered to be high due to the potential for improper validation of X.509 certificates.

How do I fix REDHAT-BUG-1273734?

To fix REDHAT-BUG-1273734, it is recommended to update the OpenJDK Security component to the latest version that addresses the vulnerability.

What are the potential impacts of REDHAT-BUG-1273734?

The potential impact of REDHAT-BUG-1273734 is that an attacker could exploit the flaw to have a Java application accept invalid certificates.

Which versions of OpenJDK are affected by REDHAT-BUG-1273734?

REDHAT-BUG-1273734 affects the OpenJDK Security component prior to the updates that include the fix for this vulnerability.

Is there a workaround for REDHAT-BUG-1273734?

Currently, there are no effective workarounds for REDHAT-BUG-1273734 other than applying the available updates.