Java Web Start exposes username and the pathname of the JWS cache
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| n/a | n/a | affected |
|
Configuration 1 [-]
|
| Package | CPE | Advisory | Released Date |
|---|---|---|---|
| Extras for RHEL 4 | |||
| java-1.6.0-sun-1:1.6.0.11-1jpp.1.el4 | cpe:/a:redhat:rhel_extras:4 | RHSA-2008:1018 | 2008-12-04T00:00:00Z |
| java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4 | cpe:/a:redhat:rhel_extras:4 | RHSA-2008:1025 | 2008-12-04T00:00:00Z |
| java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4 | cpe:/a:redhat:rhel_extras:4 | RHSA-2009:0016 | 2009-01-13T00:00:00Z |
| java-1.6.0-ibm-1:1.6.0.4-1jpp.1.el4 | cpe:/a:redhat:rhel_extras:4 | RHSA-2009:0369 | 2009-03-25T00:00:00Z |
| Supplementary for Red Hat Enterprise Linux 5 | |||
| java-1.6.0-sun-1:1.6.0.11-1jpp.1.el5 | cpe:/a:redhat:rhel_extras:5 | RHSA-2008:1018 | 2008-12-04T00:00:00Z |
| java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5 | cpe:/a:redhat:rhel_extras:5 | RHSA-2008:1025 | 2008-12-04T00:00:00Z |
| java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5 | cpe:/a:redhat:rhel_extras:5 | RHSA-2009:0016 | 2009-01-13T00:00:00Z |
| java-1.6.0-ibm-1:1.6.0.4-1jpp.1.el5 | cpe:/a:redhat:rhel_extras:5 | RHSA-2009:0369 | 2009-03-25T00:00:00Z |
No data available yet.
| Source | ID | Title |
|---|---|---|
EUVD |
EUVD-2008-5318 | Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier, and JDK and JRE 5.0 Update 16 and earlier, allows untrusted JWS applications to obtain the pathname of the JWS cache and the application username via unknown vectors, aka CR 6727071. |
No CVSS v4.0
No CVSS v3.1
No CVSS v3.0
This CVE is not in the KEV list.
Exploit prediction score: 3.0% (3.013% probability within 30 days)
Key SSVC decision points have not yet been added.
No history.