NVD

Id
26446  
Name
CVE-2015-5235  
Description
IcedTea-Web before 1.5.3 and 1.6.x before 1.6.1 does not properly determine the origin of unsigned applets, which allows remote attackers to bypass the approval process or trick users into approving applet execution via a crafted web page.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2015-10-09  
Modified Date
2016-12-07  
Seq
2015-5235  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
139828 26446 CVE-2015-5235 FEDORA-2015-15676  View
139829 26446 CVE-2015-5235 FEDORA-2015-15677  View
139830 26446 CVE-2015-5235 openSUSE-SU-2015:1595  View
139831 26446 CVE-2015-5235 [distro-pkg-dev] 20150911 IcedTea-Web 1.6.1 and 1.5.3 released  View
139832 26446 CVE-2015-5235 RHSA-2016:0778  View
139833 26446 CVE-2015-5235 http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html  View
139834 26446 CVE-2015-5235 1033780  View
139835 26446 CVE-2015-5235 USN-2817-1  View
139836 26446 CVE-2015-5235 https://bugzilla.redhat.com/show_bug.cgi?id=1233697  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
9866 JVNDB-2015-005186 IcedTea-Web における承認プロセスを回避される脆弱性 IcedTea-Web は、署名のないアプレットの源を適切に判定しないため、承認プロセスを回避される、またはユーザがアプレットの実行を承認するように誘導される脆弱性が存在します。 CVE-2015-5235 82460 CVE-2015-5235 26446 4.3 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-005186.html 2015-09-11 2015-10-14 View