REDHAT-BUG-1730255
First published: Tue Jul 16 2019(Updated: )
It was discovered that the AccessController class implementation in the Security component of OpenJDK failed, in certain cases, to consider the current context and correctly restrict privileges based on it. An untrusted Java application or applet could use this flaw to bypass certain Java sandbox restrictions.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| OpenJDK |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html#AppendixJAVA
- https://access.redhat.com/errata/RHSA-2019:1817
- https://access.redhat.com/errata/RHSA-2019:1810
- https://access.redhat.com/errata/RHSA-2019:1811
- https://access.redhat.com/errata/RHSA-2019:1815
- https://access.redhat.com/errata/RHSA-2019:1816
- https://access.redhat.com/errata/RHSA-2019:1840
- https://access.redhat.com/errata/RHSA-2019:1839
- https://access.redhat.com/security/cve/cve-2019-2786
- https://access.redhat.com/errata/RHSA-2019:2585
- https://access.redhat.com/errata/RHSA-2019:2590
- https://access.redhat.com/errata/RHSA-2019:2592
- https://access.redhat.com/errata/RHSA-2019:2737
- http://hg.openjdk.java.net/jdk-updates/jdk11u/rev/190106d07f25
- http://hg.openjdk.java.net/jdk8u/jdk8u/jdk/rev/dacc6a3dd712
- http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/708f34dd480f
- https://bugzilla.redhat.com/show_bug.cgi?id=1730255
Frequently Asked Questions
What is the severity of REDHAT-BUG-1730255?
The severity of REDHAT-BUG-1730255 is considered high due to the potential for privilege escalation in untrusted Java applications.
How do I fix REDHAT-BUG-1730255?
To fix REDHAT-BUG-1730255, you should update your OpenJDK to the latest patched version provided by Red Hat.
What applications are affected by REDHAT-BUG-1730255?
REDHAT-BUG-1730255 affects applications running on OpenJDK that utilize the Security component for Java sandboxing.
What are the risks of not addressing REDHAT-BUG-1730255?
Failing to address REDHAT-BUG-1730255 may allow an untrusted Java application to bypass security restrictions, leading to potential security breaches.
Is REDHAT-BUG-1730255 related to Java security vulnerabilities?
Yes, REDHAT-BUG-1730255 is directly related to a security vulnerability in the Java sandbox environment provided by OpenJDK.
- agent/type
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2019-2786
- agent/first-publish-date
- agent/last-modified-date
- agent/source
- agent/severity
- agent/references
- agent/description
- agent/event
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/openjdk
- canonical/openjdk