REDHAT-BUG-1730251: Medium severity sun jsse vulnerability
A flaw was found in the way the JSSE component of OpenJDK handled certificate status / OCSP stapling message during TLS handshake. A remote attacker could possibly use this flaw to gain access to certain sensitive information by manipulating TLS handshake messages.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-1730251?
The severity of REDHAT-BUG-1730251 is rated as important due to its potential impact on sensitive information exposure.
How do I fix REDHAT-BUG-1730251?
To fix REDHAT-BUG-1730251, update OpenJDK to the latest patched version.
What is the impact of REDHAT-BUG-1730251?
The impact of REDHAT-BUG-1730251 allows remote attackers to manipulate TLS handshake messages, potentially leading to the exposure of sensitive information.
Which software is affected by REDHAT-BUG-1730251?
The software affected by REDHAT-BUG-1730251 is the JSSE component of OpenJDK.
Is REDHAT-BUG-1730251 related to TLS?
Yes, REDHAT-BUG-1730251 is specifically related to TLS handshake and the handling of OCSP stapling messages.