ID |
CVE-2018-2942
|
Summary |
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Windows DLL). Supported versions that are affected are Java SE: 7u181 and 8u172. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H). |
References |
|
Vulnerable Configurations |
-
cpe:2.3:a:oracle:jdk:1.7.0:update_181
cpe:2.3:a:oracle:jdk:1.7.0:update_181
-
cpe:2.3:a:oracle:jdk:1.8.0:update_172
cpe:2.3:a:oracle:jdk:1.8.0:update_172
-
cpe:2.3:a:oracle:jre:1.7.0:update_181
cpe:2.3:a:oracle:jre:1.7.0:update_181
-
cpe:2.3:a:oracle:jre:1.8.0:update_172
cpe:2.3:a:oracle:jre:1.8.0:update_172
|
CVSS |
Base: | 5.1 |
Impact: | |
Exploitability: | |
|
CWE |
CWE-284 |
CAPEC |
-
Embedding Scripts within Scripts
An attack of this type exploits a programs' vulnerabilities that are brought on by allowing remote hosts to execute scripts. The attacker leverages this capability to execute scripts to execute his/her own script by embedding it within other scripts that the target software is likely to execute. The attacker must have the ability to inject script into script that is likely to be executed. If this is done, then the attacker can potentially launch a variety of probes and attacks against the web server's local environment, in many cases the so-called DMZ, back end resources the web server can communicate with, and other hosts.
With the proliferation of intermediaries, such as Web App Firewalls, network devices, and even printers having JVMs and Web servers, there are many locales where an attacker can inject malicious scripts. Since this attack pattern defines scripts within scripts, there are likely privileges to execute said attack on the host.
Of course, these attacks are not solely limited to the server side, client side scripts like Ajax and client side JavaScript can contain malicious scripts as well. In general all that is required is for there to be sufficient privileges to execute a script, but not protected against writing.
-
Signature Spoofing by Key Theft
An attacker obtains an authoritative or reputable signer's private signature key by theft and then uses this key to forge signatures from the original signer to mislead a victim into performing actions that benefit the attacker.
|
nessus
via4
|
NASL family | Windows | NASL id | ORACLE_JAVA_CPU_JUL_2018.NASL | description | The version of Oracle (formerly Sun) Java SE or Java for Business
installed on the remote host is prior to 10 Update 2, 8 Update 181,
7 Update 191, or 6 Update 201. It is, therefore, affected by
multiple vulnerabilities related to the following components :
- Concurrency. A difficult to exploit vulnerability allows
an unauthenticated attacker with network access via
multiple protocols to compromise Java SE (CVE-2018-2952)
- Deployment. A difficult to exploit vulnerability allows
an unauthenticated attacker with network access via
multiple protocols to compromise Java SE (CVE-2018-2964)
- JSSE. A difficult to exploit vulnerability allows
an unauthenticated attacker with network access via
multiple protocols to compromise Java SE (CVE-2018-2973)
- Java DB. A difficult to exploit vulnerability allows an
unauthenticated attacker with network access via
multiple protocols to compromise Java SE. (CVE-2018-2938)
- JavaFX. A difficult to exploit vulnerability allows an
unauthenticated attacker with network access via
multiple protocols to compromise Java SE. (CVE-2018-2941)
- Libraries. An easily exploitable vulnerability allows
an unauthenticated attacker with network access via
multiple protocols to compromise Java SE. (CVE-2018-2940)
- Security. A difficult to exploit vulnerability allows
an unauthenticated attacker with network access via
multiple protocols to compromise Java SE (CVE-2018-2972)
- Windows DLL. A difficult to exploit vulnerability allows
an unauthenticated attacker with network access via
multiple protocols to compromise Java SE (CVE-2018-2942)
Note that Nessus has not tested for these issues but has instead
relied only on the application's self-reported version number. | last seen | 2019-01-16 | modified | 2018-12-21 | plugin id | 111163 | published | 2018-07-20 | reporter | Tenable | source | https://www.tenable.com/plugins/index.php?view=single&id=111163 | title | Oracle Java SE Multiple Vulnerabilities (July 2018 CPU) |
NASL family | PhotonOS Local Security Checks | NASL id | PHOTONOS_PHSA-2018-1_0-0167_OPENJDK.NASL | description | An update of the openjdk package has been released. | last seen | 2019-02-08 | modified | 2019-02-07 | plugin id | 121864 | published | 2019-02-07 | reporter | Tenable | source | https://www.tenable.com/plugins/index.php?view=single&id=121864 | title | Photon OS 1.0: Openjdk PHSA-2018-1.0-0167 |
NASL family | Windows | NASL id | ORACLE_JROCKIT_CPU_JUL_2018.NASL | description | The version of Oracle JRockit installed on the remote Windows host is
R28.3.18. It is, therefore, affected by multiple vulnerabilities.
See advisory for details. | last seen | 2019-01-16 | modified | 2018-12-21 | plugin id | 111214 | published | 2018-07-20 | reporter | Tenable | source | https://www.tenable.com/plugins/index.php?view=single&id=111214 | title | Oracle JRockit R28.3.18 Multiple Vulnerabilities (July 2018 CPU) |
NASL family | PhotonOS Local Security Checks | NASL id | PHOTONOS_PHSA-2018-2_0-0077_OPENJDK8.NASL | description | An update of the openjdk8 package has been released. | last seen | 2019-02-08 | modified | 2019-02-07 | plugin id | 121974 | published | 2019-02-07 | reporter | Tenable | source | https://www.tenable.com/plugins/index.php?view=single&id=121974 | title | Photon OS 2.0: Openjdk8 PHSA-2018-2.0-0077 |
NASL family | PhotonOS Local Security Checks | NASL id | PHOTONOS_PHSA-2018-1_0-0167.NASL | description | An update of 'vim', 'ntp', 'openjdk', 'libmspack', 'blktrace',
'systemd', 'perl' packages of Photon OS has been released. | last seen | 2019-02-08 | modified | 2019-02-07 | plugin id | 111946 | published | 2018-08-17 | reporter | Tenable | source | https://www.tenable.com/plugins/index.php?view=single&id=111946 | title | Photon OS 1.0: Blktrace / Libmspack / Ntp / Openjdk / Perl / Systemd / Vim PHSA-2018-1.0-0167 (deprecated) |
NASL family | PhotonOS Local Security Checks | NASL id | PHOTONOS_PHSA-2018-2_0-0077.NASL | description | An update of 'openjdk8' packages of Photon OS has been released. | last seen | 2019-02-08 | modified | 2019-02-07 | plugin id | 111961 | published | 2018-08-17 | reporter | Tenable | source | https://www.tenable.com/plugins/index.php?view=single&id=111961 | title | Photon OS 2.0: Openjdk8 PHSA-2018-2.0-0077 (deprecated) |
|
refmap
via4
|
bid | 104781 | confirm | | sectrack | 1041302 |
|
Last major update |
18-07-2018 - 09:29 |
Published |
18-07-2018 - 09:29 |
Last modified |
27-07-2018 - 21:29 |