REDHAT-BUG-1602146: Medium severity oracle java se 7 vulnerability
Published Jul 17, 2018
·Updated
Oracle Java SE 6u201, 7u191, 8u181, and 10.0.2 fixes an unspecified vulnerability in the Libraries component (CVE-2018-2940). Upstream has CVSS scored this issue as: 4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
External Reference:
http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html#AppendixJAVA
Affected Software
1 affected component
Oracle Java Se>=6u201<=10.0.2
Event History
Jul 17, 2018
Data Sourced
via Red Hat·09:07 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What access does an attacker need to exploit this issue?
The upstream CVSS vector indicates network access is sufficient, with low attack complexity and no privileges required. Exploitation does require user interaction.
2
What is the likely impact if the vulnerability is exploited?
The stated impact is limited to confidentiality; integrity and availability are not affected according to the upstream CVSS vector.
3
Which Java releases include a fix?
Oracle Java SE 6u201, 7u191, 8u181, and 10.0.2 include fixes for this Libraries component vulnerability.