REDHAT-BUG-1730255: Low severity openjdk vulnerability

Published Jul 16, 2019

Updated

It was discovered that the AccessController class implementation in the Security component of OpenJDK failed, in certain cases, to consider the current context and correctly restrict privileges based on it. An untrusted Java application or applet could use this flaw to bypass certain Java sandbox restrictions.

Affected Software

1 affected component

OpenJDK OpenJDK

Event History

Jul 16, 2019

Data Sourced

via Red Hat·10:13 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-1730255?

The severity of REDHAT-BUG-1730255 is considered high due to the potential for privilege escalation in untrusted Java applications.

How do I fix REDHAT-BUG-1730255?

To fix REDHAT-BUG-1730255, you should update your OpenJDK to the latest patched version provided by Red Hat.

What applications are affected by REDHAT-BUG-1730255?

REDHAT-BUG-1730255 affects applications running on OpenJDK that utilize the Security component for Java sandboxing.

What are the risks of not addressing REDHAT-BUG-1730255?

Failing to address REDHAT-BUG-1730255 may allow an untrusted Java application to bypass security restrictions, leading to potential security breaches.

Is REDHAT-BUG-1730255 related to Java security vulnerabilities?

Yes, REDHAT-BUG-1730255 is directly related to a security vulnerability in the Java sandbox environment provided by OpenJDK.