NVD

Id
38478  
Name
CVE-2013-2415  
Description
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, and OpenJDK 6 and 7, allows local users to affect confidentiality via vectors related to JAX-WS. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "processing of MTOM attachments" and the creation of temporary files with weak permissions.  
Reject
 
CVSS Version
2  
CVSS Score
2.1  
Severity
Low  
CVSS Base Score
2.1  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-18  
Published
2013-04-17  
Modified Date
2014-10-04  
Seq
2013-2415  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
196515 38478 CVE-2013-2415 http://blog.fuseyism.com/index.php/2013/04/22/security-icedtea-2-3-9-for-openjdk-7-released/  View
196516 38478 CVE-2013-2415 http://blog.fuseyism.com/index.php/2013/04/25/security-icedtea-1-11-11-1-12-5-for-openjdk-6-released/  View
196517 38478 CVE-2013-2415 http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jaxws/rev/e07c518282ba  View
196518 38478 CVE-2013-2415 SUSE-SU-2013:0814  View
196519 38478 CVE-2013-2415 openSUSE-SU-2013:0777  View
196520 38478 CVE-2013-2415 openSUSE-SU-2013:0964  View
196521 38478 CVE-2013-2415 [distro-pkg-dev] 20130417 [SECURITY] IcedTea 1.11.10 for OpenJDK 6 Released!  View
196522 38478 CVE-2013-2415 oval:org.mitre.oval:def:16011  View
196523 38478 CVE-2013-2415 RHSA-2013:0752  View
196524 38478 CVE-2013-2415 RHSA-2013:0757  View
196525 38478 CVE-2013-2415 GLSA-201406-32  View
196526 38478 CVE-2013-2415 MDVSA-2013:145  View
196527 38478 CVE-2013-2415 MDVSA-2013:150  View
196528 38478 CVE-2013-2415 MDVSA-2013:161  View
196529 38478 CVE-2013-2415 http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html  View
196530 38478 CVE-2013-2415 USN-1806-1  View
196531 38478 CVE-2013-2415 TA13-107A  View
196532 38478 CVE-2013-2415 https://bugzilla.redhat.com/show_bug.cgi?id=952389  View
196533 38478 CVE-2013-2415 https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0124  View
196534 38478 CVE-2013-2415 https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0130  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
20813 JVNDB-2013-002388 Oracle Java SE の Java Runtime Environment における JAX-WS の処理に関する脆弱性 Oracle Java SE の Java Runtime Environment (JRE) および OpenJDK には、JAX-WS に関する処理に不備があるため、機密性に影響のある脆弱性が存在します。 CVE-2013-2415 62357 CVE-2013-2415 38478 2.1 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-002388.html 2013-04-16 2014-03-28 View