REDHAT-BUG-1602145: Medium severity oracle java se 7 vulnerability
Published Jul 17, 2018
·Updated
Oracle Java SE 6u201, 7u191, 8u181, and 10.0.2 fixes an unspecified vulnerability in the JSSE component (CVE-2018-2973). Upstream has CVSS scored this issue as: 5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
External Reference:
http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html#AppendixJAVA
Affected Software
1 affected component
Oracle Java Se
Event History
Jul 17, 2018
Data Sourced
via Red Hat·09:07 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What level of access does an attacker need to exploit this issue?
The upstream CVSS vector indicates that it is remotely exploitable over the network and requires no privileges or user interaction. Exploitation has high attack complexity.
2
What is the potential impact if exploitation succeeds?
The stated CVSS vector assigns high impact to integrity, with no confidentiality or availability impact. The scope is listed as unchanged.
3
Which Java releases include a fix?
Oracle Java SE 6u201, 7u191, 8u181, and 10.0.2 are identified as containing fixes for this JSSE vulnerability.