REDHAT-BUG-1602146: Medium severity oracle java se 7 vulnerability

Q: What access does an attacker need to exploit this issue?

The upstream CVSS vector indicates network access is sufficient, with low attack complexity and no privileges required. Exploitation does require user interaction.

Q: What is the likely impact if the vulnerability is exploited?

The stated impact is limited to confidentiality; integrity and availability are not affected according to the upstream CVSS vector.

Q: Which Java releases include a fix?

Oracle Java SE 6u201, 7u191, 8u181, and 10.0.2 include fixes for this Libraries component vulnerability.

Published Jul 17, 2018

Updated

Oracle Java SE 6u201, 7u191, 8u181, and 10.0.2 fixes an unspecified vulnerability in the Libraries component (CVE-2018-2940). Upstream has CVSS scored this issue as: 4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

External Reference:

http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html#AppendixJAVA

Affected Software

1 affected component

Oracle Java Se>=6u201<=10.0.2

Event History

Jul 17, 2018

Data Sourced

via Red Hat·09:07 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What access does an attacker need to exploit this issue?

The upstream CVSS vector indicates network access is sufficient, with low attack complexity and no privileges required. Exploitation does require user interaction.

What is the likely impact if the vulnerability is exploited?

The stated impact is limited to confidentiality; integrity and availability are not affected according to the upstream CVSS vector.

Which Java releases include a fix?

Oracle Java SE 6u201, 7u191, 8u181, and 10.0.2 include fixes for this Libraries component vulnerability.

REDHAT-BUG-1602146: Medium severity oracle java se 7 vulnerability

Affected Software

Event History

Frequently Asked Questions

What access does an attacker need to exploit this issue?

What is the likely impact if the vulnerability is exploited?

Which Java releases include a fix?

Company

Resources

Contact

Frequently Asked Questions

What access does an attacker need to exploit this issue?

What is the likely impact if the vulnerability is exploited?

Which Java releases include a fix?