REDHAT-BUG-1889697: Low severity OpenJDK OpenJDK Libraries vulnerability

Published Oct 20, 2020

Updated

It was discovered that the Libraries component of OpenJDK failed to perform permission check when converting file system paths to URI in UnixUriUtils and WindowsUriSupport classes. An untrusted Java application or applet could use this flaw to bypass certain Java sandbox restrictions.

Affected Software

1 affected component

OpenJDK OpenJDK Libraries

Event History

Oct 20, 2020

Data Sourced

via Red Hat·11:56 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-1889697?

The severity of REDHAT-BUG-1889697 is considered high due to the potential for unauthorized access when Java sandbox restrictions are bypassed.

How do I fix REDHAT-BUG-1889697?

To fix REDHAT-BUG-1889697, you need to update OpenJDK Libraries to the latest version where this vulnerability has been addressed.

Who is affected by REDHAT-BUG-1889697?

Any users or applications running vulnerable versions of OpenJDK Libraries on Unix or Windows systems are affected by REDHAT-BUG-1889697.

What types of applications are at risk with REDHAT-BUG-1889697?

Untrusted Java applications or applets that rely on Java's sandbox features are at risk from the vulnerabilities described in REDHAT-BUG-1889697.

Is there known exploitation of REDHAT-BUG-1889697?

As of now, there are no confirmed reports of active exploitation of REDHAT-BUG-1889697.