Description
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Libraries, a different vulnerability than CVE-2013-2452 and CVE-2013-2455. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is due to an incorrect "checking order" within the AccessControlContext class.
References (26)
Core 26
Core References
Vendor Advisory vendor-advisory
x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2013-1455.html
Vendor Advisory vendor-advisory
x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2013-1059.html
Vendor Advisory vendor-advisory
x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2013-1081.html
Vendor Advisory vendor-advisory
x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2013-0963.html
Vendor Advisory vendor-advisory
x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2013-1456.html
Vendor Advisory vendor-advisory
x_refsource_redhat
https://access.redhat.com/errata/RHSA-2014:0414
Vendor Advisory x_refsource_confirm
http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/60646
Third Party Advisory vendor-advisory
x_refsource_gentoo
http://security.gentoo.org/glsa/glsa-201406-32.xml
Third Party Advisory, VDB Entry vdb-entry
signature
x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17230
Mailing List vendor-advisory
x_refsource_suse
http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html
Mailing List vendor-advisory
x_refsource_hp
http://marc.info/?l=bugtraq&m=137545505800971&w=2
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/54154
Mailing List vendor-advisory
x_refsource_suse
http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00029.html
Various Sources x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21644197
Mailing List vendor-advisory
x_refsource_suse
http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00000.html
US Government Resource third-party-advisory
x_refsource_cert
http://www.us-cert.gov/ncas/alerts/TA13-169A
Third Party Advisory x_refsource_confirm
http://advisories.mageia.org/MGASA-2013-0185.html
Various Sources x_refsource_misc
http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/f6dce3552285
Mailing List vendor-advisory
x_refsource_suse
http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html
Various Sources x_refsource_misc
http://hg.openjdk.java.net/jdk7u/jdk7u/hotspot/rev/0344da726f70
Vendor Advisory vendor-advisory
x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDVSA-2013:183
Various Sources x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21642336
Mailing List vendor-advisory
x_refsource_suse
http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html
Issue Tracking x_refsource_confirm
https://bugzilla.redhat.com/show_bug.cgi?id=975137
Third Party Advisory, VDB Entry vdb-entry
signature
x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19299
Scores
EPSS
0.0385
EPSS Percentile
88.4%
Details
Status
published
Products (6)
oracle/jdk
1.7.0 (14 CPE variants)
oracle/jdk
1.6.0 update22 (18 CPE variants)
oracle/jdk
1.5.0 update36 (5 CPE variants)
oracle/jdk
< 1.6.0
oracle/jdk
< 1.7.0
oracle/jre
1.7.0 (11 CPE variants)
Published
Jun 18, 2013
Tracked Since
Feb 18, 2026