ID CVE-2007-1419
Summary The Java Management Extensions Remote API Remote Method Invocation over Internet Inter-ORB Protocol (JMX RMI-IIOP) API in Java Dynamic Management Kit 5.1 before 20070309 does not properly enforce the java.policy, which allows local users to obtain certain MBeans data access by operating a server application accessed by a privileged remote authenticated user.
References
Vulnerable Configurations
  • cpe:2.3:a:sun:java_dynamic_management_kit:5.1:*:*:*:*:*:*:*
    cpe:2.3:a:sun:java_dynamic_management_kit:5.1:*:*:*:*:*:*:*
CVSS
Base: 4.3 (as of 08-03-2011 - 02:52)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
LOCAL LOW SINGLE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL PARTIAL
cvss-vector via4 AV:L/AC:L/Au:S/C:P/I:P/A:P
refmap via4
bid 22907
osvdb 34018
sectrack 1017745
secunia 24497
sunalert 102835
vupen ADV-2007-0906
Last major update 08-03-2011 - 02:52
Published 12-03-2007 - 23:19
Back to Top