← Back

CVE-2013-2423

nvd nist
Published: Apr 17, 2013Modified: Apr 22, 2026CISA KEV

JSON object

Loading...
3.7
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
Exploitability: 2.2 / Impact: 1.4
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, and OpenJDK 7, allows remote attackers to affect integrity via unknown vectors related to HotSpot. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from the original researcher that this vulnerability allows remote attackers to bypass permission checks by the MethodHandles method and modify arbitrary public final fields using reflection and type confusion, as demonstrated using integer and double fields to disable the security manager.

Affected (15)

Oracle
1 product
Jre
Canonical
1 product
Ubuntu Linux
Opensuse
1 product
Opensuse
Configuration A
13 vulnerable
Vulnerable SoftwareAffected Versions
Oracle
Jre
Version 1.7.0
Jre
Version 1.7.0 update10
Jre
Version 1.7.0 update11
Jre
Version 1.7.0 update13
Jre
Version 1.7.0 update15
Jre
Version 1.7.0 update1
Jre
Version 1.7.0 update2
Jre
Version 1.7.0 update3
Jre
Version 1.7.0 update4
Jre
Version 1.7.0 update5
Jre
Version 1.7.0 update6
Jre
Version 1.7.0 update7
Jre
Version 1.7.0 update9
Configuration B
2 vulnerable
Vulnerable SoftwareAffected Versions
Ubuntu Linux
Version 12.10
Opensuse
Version 12.3

Related CWEs

CWE-284
Improper Access Control
The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

References (33)

Source: secalert_us@oracle.com
Broken Link
Source: secalert_us@oracle.com
Not Applicable
Source: secalert_us@oracle.com
Patch
Source: secalert_us@oracle.com
Third Party Advisory
Source: secalert_us@oracle.com
Third Party Advisory
Source: secalert_us@oracle.com
Third Party Advisory
Source: secalert_us@oracle.com
Third Party Advisory
Source: secalert_us@oracle.com
Broken Link
Source: secalert_us@oracle.com
Third Party AdvisoryVDB Entry
Source: secalert_us@oracle.com
Third Party Advisory
Source: secalert_us@oracle.com
Vendor Advisory
Source: secalert_us@oracle.com
Third Party Advisory
Source: secalert_us@oracle.com
Third Party AdvisoryUS Government Resource
Source: secalert_us@oracle.com
Issue Tracking
Source: secalert_us@oracle.com
Broken Link
Source: secalert_us@oracle.com
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link
Source: af854a3a-2127-422b-91ae-364da2661108
Not Applicable
Source: af854a3a-2127-422b-91ae-364da2661108
Patch
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryUS Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108
Issue Tracking
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0
US Government Resource

Timeline

No history available yet.