Sandbox Restrictions Bypass

2019-01-1509:06:29

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

JSON

openjdk is vulnerable to sandbox restrictions bypass. An unspecified vulnerability allows remote attacks and untrusted Java applications or applets to bypass certain Java sandbox restrictions to perform unauthorized actions.

CPENameOperatorVersion
java-1.7.0-openjdkeq1.7.0.9__2.3.5.3.el6_3
java-1.7.0-openjdkeq1.7.0.55__2.4.7.1.el6_5
java-1.7.0-openjdkeq1.7.0.45__2.4.3.2.el6_4
java-1.7.0-openjdkeq1.7.0.55__2.4.7.1.el5_10
java-1.7.0-openjdkeq1.7.0.45__2.4.3.4.el6_5
java-1.7.0-openjdkeq1.7.0.71__2.5.3.1.el6
java-1.7.0-openjdkeq1.7.0.25__2.3.10.5.el5_9
java-1.7.0-openjdkeq1.7.0.51__2.4.4.2.el5_10
java-1.7.0-openjdkeq1.7.0.75__2.5.4.0.el5_11
java-1.7.0-openjdkeq1.7.0.9__2.3.4.1.el6_3

Name	Operator	Version
java-1.7.0-openjdk	eq	1.7.0.9__2.3.5.3.el6_3
java-1.7.0-openjdk	eq	1.7.0.55__2.4.7.1.el6_5
java-1.7.0-openjdk	eq	1.7.0.45__2.4.3.2.el6_4
java-1.7.0-openjdk	eq	1.7.0.55__2.4.7.1.el5_10
java-1.7.0-openjdk	eq	1.7.0.45__2.4.3.4.el6_5
java-1.7.0-openjdk	eq	1.7.0.71__2.5.3.1.el6
java-1.7.0-openjdk	eq	1.7.0.25__2.3.10.5.el5_9
java-1.7.0-openjdk	eq	1.7.0.51__2.4.4.2.el5_10
java-1.7.0-openjdk	eq	1.7.0.75__2.5.4.0.el5_11
java-1.7.0-openjdk	eq	1.7.0.9__2.3.4.1.el6_3