5.9

CVE-2019-2684

EPSS 0.99%
Veröffentlicht 23.04.2019 19:32:55
Zuletzt bearbeitet 21.11.2024 04:41:21
Quelle secalert_us@oracle.com
Teams Watchlist Login
Unerledigt Login

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI). Supported versions that are affected are Java SE: 7u211, 8u202, 11.0.2 and 12; Java SE Embedded: 8u201. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.9 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N).

Betroffene Produkte Warnungen 0 Metriken 3 CWE 0 Referenzen 40

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Oracle ≫ Jdk Version1.7.0 Updateupdate211

Oracle ≫ Jdk Version1.8.0 Updateupdate201

Oracle ≫ Jdk Version1.8.0 Updateupdate202

Oracle ≫ Jdk Version11.0.2

Oracle ≫ Jdk Version12

Oracle ≫ Jre Version1.7.0 Updateupdate211

Oracle ≫ Jre Version1.8.0 Updateupdate201

Oracle ≫ Jre Version1.8.0 Updateupdate202

Oracle ≫ Jre Version11.0.2

Oracle ≫ Jre Version12

Redhat ≫ Openshift Container Platform Version3.11

Redhat ≫ Satellite Version5.8

Redhat ≫ Enterprise Linux Version8.0

Redhat ≫ Enterprise Linux Desktop Version6.0

Redhat ≫ Enterprise Linux Desktop Version7.0

Redhat ≫ Enterprise Linux Eus Version8.1

Redhat ≫ Enterprise Linux Eus Version8.2

Redhat ≫ Enterprise Linux Eus Version8.4

Redhat ≫ Enterprise Linux Eus Version8.6

Redhat ≫ Enterprise Linux Server Version6.0

Redhat ≫ Enterprise Linux Server Version7.0

Redhat ≫ Enterprise Linux Server Aus Version8.2

Redhat ≫ Enterprise Linux Server Aus Version8.4

Redhat ≫ Enterprise Linux Server Aus Version8.6

Redhat ≫ Enterprise Linux Server Tus Version8.2

Redhat ≫ Enterprise Linux Server Tus Version8.4

Redhat ≫ Enterprise Linux Server Tus Version8.6

Redhat ≫ Enterprise Linux Workstation Version6.0

Redhat ≫ Enterprise Linux Workstation Version7.0

Opensuse ≫ Leap Version15.0

Opensuse ≫ Leap Version42.3

Debian ≫ Debian Linux Version8.0

Debian ≫ Debian Linux Version9.0

Apache ≫ Cassandra Version >= 2.1.0 < 2.1.22

Apache ≫ Cassandra Version >= 2.2.0 < 2.2.18

Apache ≫ Cassandra Version >= 3.0.0 < 3.0.22

Apache ≫ Cassandra Version >= 3.11.0 < 3.11.8

Apache ≫ Cassandra Version4.0.0 Updatebeta1

Apache ≫ Tomcat Version >= 7.0.0 <= 7.0.97

Apache ≫ Tomcat Version >= 8.5.0 <= 8.5.47

Apache ≫ Tomcat Version >= 9.0.1 <= 9.0.28

Apache ≫ Tomcat Version9.0.0 Updatemilestone1

Apache ≫ Tomcat Version9.0.0 Updatemilestone10

Apache ≫ Tomcat Version9.0.0 Updatemilestone11

Apache ≫ Tomcat Version9.0.0 Updatemilestone12

Apache ≫ Tomcat Version9.0.0 Updatemilestone13

Apache ≫ Tomcat Version9.0.0 Updatemilestone14

Apache ≫ Tomcat Version9.0.0 Updatemilestone15

Apache ≫ Tomcat Version9.0.0 Updatemilestone16

Apache ≫ Tomcat Version9.0.0 Updatemilestone17

Apache ≫ Tomcat Version9.0.0 Updatemilestone18

Apache ≫ Tomcat Version9.0.0 Updatemilestone19

Apache ≫ Tomcat Version9.0.0 Updatemilestone2

Apache ≫ Tomcat Version9.0.0 Updatemilestone20

Apache ≫ Tomcat Version9.0.0 Updatemilestone21

Apache ≫ Tomcat Version9.0.0 Updatemilestone22

Apache ≫ Tomcat Version9.0.0 Updatemilestone23

Apache ≫ Tomcat Version9.0.0 Updatemilestone24

Apache ≫ Tomcat Version9.0.0 Updatemilestone25

Apache ≫ Tomcat Version9.0.0 Updatemilestone26

Apache ≫ Tomcat Version9.0.0 Updatemilestone27

Apache ≫ Tomcat Version9.0.0 Updatemilestone3

Apache ≫ Tomcat Version9.0.0 Updatemilestone4

Apache ≫ Tomcat Version9.0.0 Updatemilestone5

Apache ≫ Tomcat Version9.0.0 Updatemilestone6

Apache ≫ Tomcat Version9.0.0 Updatemilestone7

Apache ≫ Tomcat Version9.0.0 Updatemilestone8

Apache ≫ Tomcat Version9.0.0 Updatemilestone9

Canonical ≫ Ubuntu Linux Version16.04 SwEditionesm

Canonical ≫ Ubuntu Linux Version18.04 SwEditionlts

Canonical ≫ Ubuntu Linux Version18.10

Canonical ≫ Ubuntu Linux Version19.04

Hp ≫ Xp7 Command View SwEditionadvanced Version < 8.6.5-00

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.99%	0.762

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	5.9	2.2	3.6	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
nvd@nist.gov	4.3	8.6	2.9	AV:N/AC:M/Au:N/C:N/I:P/A:N

https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E

https://lists.apache.org/thread.html/r3bbb800a816d0a51eccc5a228c58736960a9fffafa581a225834d97d%40%3Cdev.tomcat.apache.org%3E

https://lists.apache.org/thread.html/r48c1444845fe15a823e1374674bfc297d5008a5453788099ea14caf0%40%3Cdev.tomcat.apache.org%3E

https://lists.apache.org/thread.html/r6ccee4e849bc77df0840c7f853f6bd09d426f6741247da2b7429d5d9%40%3Cdev.tomcat.apache.org%3E

https://lists.apache.org/thread.html/raba0fabaf4d56d4325ab2aca8814f0b30a237ab83d8106b115ee279a%40%3Cdev.tomcat.apache.org%3E

http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00059.html

Third Party Advisory

Mailing List

http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00013.html

Third Party Advisory

Mailing List

https://access.redhat.com/errata/RHSA-2019:1238

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00058.html

Third Party Advisory

Mailing List

https://security.gentoo.org/glsa/201908-10

Third Party Advisory

https://access.redhat.com/errata/RHBA-2019:0959

Third Party Advisory

Mailing List

https://access.redhat.com/errata/RHSA-2019:1163

Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:1164

Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:1165

Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:1166

Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:1325

Third Party Advisory

http://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html

Patch

Vendor Advisory

http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00007.html

Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:1146

Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:1518

Third Party Advisory

https://lists.debian.org/debian-lts-announce/2019/05/msg00011.html

Third Party Advisory

https://seclists.org/bugtraq/2019/May/75

Third Party Advisory

Mailing List

https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03959en_us

Third Party Advisory

https://usn.ubuntu.com/3975-1/

Third Party Advisory

https://www.debian.org/security/2019/dsa-4453

Third Party Advisory

http://www.openwall.com/lists/oss-security/2020/09/01/4

Third Party Advisory

Mailing List

https://lists.apache.org/thread.html/38a01302c92ae513910d8c851a2d111736565bd698be4e3af3e4c063%40%3Cdev.tomcat.apache.org%3E

https://lists.apache.org/thread.html/43530b91506e2e0c11cfbe691173f5df8c48f51b98262426d7493b67%40%3Cannounce.tomcat.apache.org%3E

https://lists.apache.org/thread.html/71bd3e4e222479c266eaafc8d0c171ef5782a69b52f68df11b650ed7%40%3Cusers.tomcat.apache.org%3E

https://lists.apache.org/thread.html/c58d6c3b49c615916b163809f963a55421cac2264885739508e68108%40%3Cannounce.apache.org%3E

https://lists.apache.org/thread.html/f7f54b4888060d99f59993f006e25005a2b58db0c07ff866bdcd6f17%40%3Cdev.tomcat.apache.org%3E

https://lists.apache.org/thread.html/r1fd117082b992e7d43c1286e966c285f98aa362e685695d999ff42f7%40%3Cuser.cassandra.apache.org%3E

https://lists.apache.org/thread.html/r718e01f61b35409a4f7a3ccbc1cb5136a1558a9f9c2cb8d4ca9be1ce%40%3Cuser.cassandra.apache.org%3E

https://lists.apache.org/thread.html/rab8d90d28f944d84e4d7852f355a25c89451ae02c2decc4d355a9cfc%40%3Cuser.cassandra.apache.org%3E

https://lists.apache.org/thread.html/rcd7544b24d8fc32b7950ec4c117052410b661babaa857fb1fc641152%40%3Cdev.cassandra.apache.org%3E

https://lists.apache.org/thread.html/rcd7544b24d8fc32b7950ec4c117052410b661babaa857fb1fc641152%40%3Cuser.cassandra.apache.org%3E

https://support.f5.com/csp/article/K11175903?utm_source=f5support&amp%3Butm_medium=RSS

https://nvd.nist.gov/vuln/detail/CVE-2019-2684

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2019-2684

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2019-2684

EUVD