REDHAT-BUG-1761594: High severity openjdk 8 vulnerability

Published Oct 14, 2019

Updated

It was discovered that the Kerberos implementation in the Kerberos component in OpenJDK did not properly handle proxy credentials. This could lead to the unintended use of wrong credentials and possible user impersonation.

Affected Software

1 affected component

ORACLE OpenJDK

Event History

Oct 14, 2019

Data Sourced

via Red Hat·07:59 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-1761594?

The severity of REDHAT-BUG-1761594 is considered high due to the potential for user impersonation and the misuse of credentials.

How do I fix REDHAT-BUG-1761594?

To fix REDHAT-BUG-1761594, update the OpenJDK to the latest patched version provided by Oracle.

Which versions of OpenJDK are affected by REDHAT-BUG-1761594?

REDHAT-BUG-1761594 affects OpenJDK 17 and potentially other versions of the Kerberos implementation in OpenJDK.

What vulnerabilities can result from REDHAT-BUG-1761594?

REDHAT-BUG-1761594 can lead to unintended use of wrong credentials, which risks user impersonation.

Is there a known exploit for REDHAT-BUG-1761594?

As of now, there are no publicly known exploits for REDHAT-BUG-1761594, but it poses significant security risks.