CVE

Id
60397  
CVE No.
CVE-2013-0450  
Status
Candidate  
Description
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, and 5.0 through Update 38, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JMX. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to improper checks of "access control context" in the JMX RequiredModelMBean class.  
Phase
Assigned (20121207)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
609904 60397 CVE-2013-0450 CONFIRM:http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html  View
609905 60397 CVE-2013-0450 CONFIRM:http://icedtea.classpath.org/hg/release/icedtea6-1.11/file/icedtea6-1.11.6/NEWS  View
609906 60397 CVE-2013-0450 CONFIRM:http://icedtea.classpath.org/hg/release/icedtea7-forest-2.3/jdk/rev/6e0d9f4942af  View
609907 60397 CVE-2013-0450 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=906911  View
609908 60397 CVE-2013-0450 CONFIRM:https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0056  View
609909 60397 CVE-2013-0450 GENTOO:GLSA-201406-32  View
609910 60397 CVE-2013-0450 URL:http://security.gentoo.org/glsa/glsa-201406-32.xml  View
609911 60397 CVE-2013-0450 HP:HPSBUX02864  View
609912 60397 CVE-2013-0450 URL:http://marc.info/?l=bugtraq&m=136570436423916&w=2  View
609913 60397 CVE-2013-0450 HP:SSRT101156  View
609914 60397 CVE-2013-0450 URL:http://marc.info/?l=bugtraq&m=136570436423916&w=2  View
609915 60397 CVE-2013-0450 HP:HPSBMU02874  View
609916 60397 CVE-2013-0450 URL:http://marc.info/?l=bugtraq&m=136733161405818&w=2  View
609917 60397 CVE-2013-0450 HP:HPSBUX02857  View
609918 60397 CVE-2013-0450 URL:http://marc.info/?l=bugtraq&m=136439120408139&w=2  View
609919 60397 CVE-2013-0450 HP:SSRT101103  View
609920 60397 CVE-2013-0450 URL:http://marc.info/?l=bugtraq&m=136439120408139&w=2  View
609921 60397 CVE-2013-0450 HP:SSRT101184  View
609922 60397 CVE-2013-0450 URL:http://marc.info/?l=bugtraq&m=136733161405818&w=2  View
609923 60397 CVE-2013-0450 MANDRIVA:MDVSA-2013:095  View
609924 60397 CVE-2013-0450 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2013:095  View
609925 60397 CVE-2013-0450 REDHAT:RHSA-2013:0236  View
609926 60397 CVE-2013-0450 URL:http://rhn.redhat.com/errata/RHSA-2013-0236.html  View
609927 60397 CVE-2013-0450 REDHAT:RHSA-2013:0237  View
609928 60397 CVE-2013-0450 URL:http://rhn.redhat.com/errata/RHSA-2013-0237.html  View
609929 60397 CVE-2013-0450 REDHAT:RHSA-2013:0245  View
609930 60397 CVE-2013-0450 URL:http://rhn.redhat.com/errata/RHSA-2013-0245.html  View
609931 60397 CVE-2013-0450 REDHAT:RHSA-2013:0246  View
609932 60397 CVE-2013-0450 URL:http://rhn.redhat.com/errata/RHSA-2013-0246.html  View
609933 60397 CVE-2013-0450 REDHAT:RHSA-2013:0247  View
609934 60397 CVE-2013-0450 URL:http://rhn.redhat.com/errata/RHSA-2013-0247.html  View
609935 60397 CVE-2013-0450 REDHAT:RHSA-2013:1455  View
609936 60397 CVE-2013-0450 URL:http://rhn.redhat.com/errata/RHSA-2013-1455.html  View
609937 60397 CVE-2013-0450 REDHAT:RHSA-2013:1456  View
609938 60397 CVE-2013-0450 URL:http://rhn.redhat.com/errata/RHSA-2013-1456.html  View
609939 60397 CVE-2013-0450 SUSE:openSUSE-SU-2013:0312  View
609940 60397 CVE-2013-0450 URL:http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00014.html  View
609941 60397 CVE-2013-0450 SUSE:openSUSE-SU-2013:0377  View
609942 60397 CVE-2013-0450 URL:http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00001.html  View
609943 60397 CVE-2013-0450 CERT:TA13-032A  View
609944 60397 CVE-2013-0450 URL:http://www.us-cert.gov/cas/techalerts/TA13-032A.html  View
609945 60397 CVE-2013-0450 CERT-VN:VU#858729  View
609946 60397 CVE-2013-0450 URL:http://www.kb.cert.org/vuls/id/858729  View
609947 60397 CVE-2013-0450 OVAL:oval:org.mitre.oval:def:16550  View
609948 60397 CVE-2013-0450 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:16550  View
609949 60397 CVE-2013-0450 OVAL:oval:org.mitre.oval:def:19286  View
609950 60397 CVE-2013-0450 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:19286  View
609951 60397 CVE-2013-0450 OVAL:oval:org.mitre.oval:def:19363  View
609952 60397 CVE-2013-0450 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:19363  View
609953 60397 CVE-2013-0450 OVAL:oval:org.mitre.oval:def:19572  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
21607 JVNDB-2013-003182 IBM Sterling B2B Integrator および Sterling File Gateway におけるクロスサイトスクリプティングの脆弱性 IBM Sterling B2B Integrator および Sterling File Gateway には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2013-0455 60397 4.3 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-003182.html  View