REDHAT-BUG-2041435: Medium severity OpenJDK JAXP vulnerability

Published Jan 17, 2022

Updated

It was discovered that the TransformerImpl class implementation in the JAXP component of OpenJDK did not properly check access restrictions when performing URI resolution. This could possibly lead to information disclosure when performing XSLT transformations.

Affected Software

1 affected component

OpenJDK JAXP

Event History

Jan 17, 2022

Data Sourced

via Red Hat·10:58 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-2041435?

The severity of REDHAT-BUG-2041435 is considered high due to potential information disclosure risks.

How do I fix REDHAT-BUG-2041435?

To fix REDHAT-BUG-2041435, it is recommended to update your OpenJDK JAXP component to the latest version provided by Red Hat.

What systems are affected by REDHAT-BUG-2041435?

REDHAT-BUG-2041435 affects systems using OpenJDK JAXP where URI resolution occurs during XSLT transformations.

What type of vulnerability is REDHAT-BUG-2041435?

REDHAT-BUG-2041435 is an information disclosure vulnerability linked to improper access checks in URI resolution.

What might happen if REDHAT-BUG-2041435 is exploited?

If exploited, REDHAT-BUG-2041435 could lead to unauthorized disclosure of sensitive information during XSLT transformations.