NVD

Id
49913  
Name
CVE-2009-2672  
Description
The proxy mechanism implementation in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, does not prevent access to browser cookies by untrusted (1) applets and (2) Java Web Start applications, which allows remote attackers to hijack web sessions via unspecified vectors.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2009-08-05  
Modified Date
2012-10-22  
Seq
2009-2672  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
252385 49913 CVE-2009-2672 http://java.sun.com/j2se/1.5.0/ReleaseNotes.html#150_20  View
252386 49913 CVE-2009-2672 http://java.sun.com/javase/6/webnotes/6u15.html  View
252387 49913 CVE-2009-2672 APPLE-SA-2009-09-03-1  View
252388 49913 CVE-2009-2672 SUSE-SA:2009:043  View
252389 49913 CVE-2009-2672 SUSE-SR:2009:016  View
252390 49913 CVE-2009-2672 SUSE-SA:2009:053  View
252391 49913 CVE-2009-2672 SSRT090250  View
252392 49913 CVE-2009-2672 oval:org.mitre.oval:def:7723  View
252393 49913 CVE-2009-2672 oval:org.mitre.oval:def:9359  View
252394 49913 CVE-2009-2672 GLSA-200911-02  View
252395 49913 CVE-2009-2672 http://sunsolve.sun.com/search/document.do?assetkey=1-21-125136-16-1  View
252396 49913 CVE-2009-2672 263409  View
252397 49913 CVE-2009-2672 http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html  View
252398 49913 CVE-2009-2672 20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party components  View
252399 49913 CVE-2009-2672 35943  View
252400 49913 CVE-2009-2672 1022659  View
252401 49913 CVE-2009-2672 TA09-294A  View
252402 49913 CVE-2009-2672 http://www.vmware.com/security/advisories/VMSA-2009-0016.html  View
252403 49913 CVE-2009-2672 ADV-2009-2543  View
252404 49913 CVE-2009-2672 ADV-2009-3316  View
252405 49913 CVE-2009-2672 sun-jre-proxy-session-hijacking(52337)  View
252406 49913 CVE-2009-2672 RHSA-2009:1199  View
252407 49913 CVE-2009-2672 RHSA-2009:1200  View
252408 49913 CVE-2009-2672 RHSA-2009:1201  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40978 JVNDB-2009-001984 Sun JRE のプロキシ機構実装における Web セッションを乗っ取られる脆弱性 Sun Java Runtime Environment (JRE) の プロキシ機構の実装には、信頼されていないアプレットおよび Java Web Start アプリケーションがブラウザの cookie にアクセスすることを抑止しないため、Web セッションを乗っ取られる脆弱性が存在します。 CVE-2009-2672 40103 CVE-2009-2672 49913 7.5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001984.html 2009-08-04 2009-12-21 View