Back to search
CVE-2013-2415
Published: Apr 17, 2013
Modified: Aug 6, 2024
PUBLISHED
Description
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, and OpenJDK 6 and 7, allows local users to affect confidentiality via vectors related to JAX-WS. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "processing of MTOM attachments" and the creation of temporary files with weak permissions.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
GLSA-201406-32
vendor-advisory
x_refsource_GENTOO
[distro-pkg-dev] 20130417 [SECURITY] IcedTea 1.11.10 for OpenJDK 6 Released!
mailing-list
x_refsource_MLIST
MDVSA-2013:145
vendor-advisory
x_refsource_MANDRIVA
TA13-107A
third-party-advisory
x_refsource_CERT
https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0130
x_refsource_CONFIRM
RHSA-2013:0757
vendor-advisory
x_refsource_REDHAT
oval:org.mitre.oval:def:16011
vdb-entry
signature
x_refsource_OVAL
https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0124
x_refsource_CONFIRM
openSUSE-SU-2013:0777
vendor-advisory
x_refsource_SUSE
MDVSA-2013:161
vendor-advisory
x_refsource_MANDRIVA
https://bugzilla.redhat.com/show_bug.cgi?id=952389
x_refsource_MISC
openSUSE-SU-2013:0964
vendor-advisory
x_refsource_SUSE
RHSA-2013:0752
vendor-advisory
x_refsource_REDHAT
USN-1806-1
vendor-advisory
x_refsource_UBUNTU
SUSE-SU-2013:0814
vendor-advisory
x_refsource_SUSE
MDVSA-2013:150
vendor-advisory
x_refsource_MANDRIVA
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now