CVE-2016-3427

Published: Apr 21, 2016Modified: Apr 22, 2026CISA KEV

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JMX.

Affected (81)

Products: Oracle: Jdk, Jre, Jrockit, Linux · Canonical: Ubuntu Linux · Debian: Debian Linux · +5 more

Show all products

Oracle: Jdk, Jre, Jrockit, Linux · Canonical: Ubuntu Linux · Debian: Debian Linux · Netapp: E Series Santricity Management Plug Ins, E Series Santricity Storage Manager, E Series Santricity Web Services, Oncommand Balance, Oncommand Cloud Manager, Oncommand Insight, Oncommand Performance Manager, Oncommand Report, Oncommand Shift, Oncommand Unified Manager, Oncommand Workflow Automation, Storagegrid, Vasa Provider For Clustered Data Ontap, Virtual Storage Console · Apache: Cassandra · Redhat: Enterprise Linux Desktop, Enterprise Linux Eus, Enterprise Linux Server, Enterprise Linux Server Aus, Enterprise Linux Server Eus, Enterprise Linux Server Tus, Enterprise Linux Workstation, Satellite · Opensuse: Leap, Opensuse · Suse: Linux Enterprise Desktop, Linux Enterprise Module For Legacy, Linux Enterprise Server, Linux Enterprise Software Development Kit, Manager, Manager Proxy, Openstack Cloud

4 products

1 product

1 product

14 products

E Series Santricity Management Plug Ins

E Series Santricity Storage Manager

E Series Santricity Web Services

Oncommand Balance

Oncommand Cloud Manager

Oncommand Insight

Oncommand Performance Manager

Oncommand Report

Oncommand Shift

Oncommand Unified Manager

Oncommand Workflow Automation

Storagegrid

Vasa Provider For Clustered Data Ontap

Virtual Storage Console

Apache

1 product

Cassandra

Redhat

8 products

Enterprise Linux Desktop

Enterprise Linux Eus

Enterprise Linux Server

Enterprise Linux Server Aus

Enterprise Linux Server Eus

Enterprise Linux Server Tus

Enterprise Linux Workstation

2 products

7 products

Linux Enterprise Desktop

Linux Enterprise Module For Legacy

Linux Enterprise Server

Linux Enterprise Software Development Kit

Manager

Manager Proxy

Openstack Cloud

Configuration A

10 vulnerable

Vulnerable Software	Affected Versions
Oracle Jdk	Version 1.6.0 update113
Oracle Jdk	Version 1.7.0 update99
Oracle Jdk	Version 1.8.0 update77
Oracle Jre	Version 1.6.0 update113
Oracle Jre	Version 1.7.0 update99
Oracle Jre	Version 1.8.0 update77
Oracle Jrockit	Version r28.3.9
Oracle Linux	Version 5
Oracle Linux	Version 6
Oracle Linux	Version 7

Configuration B

4 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 12.04
Canonical Ubuntu Linux	Version 14.04
Canonical Ubuntu Linux	Version 15.10
Canonical Ubuntu Linux	Version 16.04

Configuration C

1 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 8.0

Configuration D

15 vulnerable

Vulnerable Software	Affected Versions
Netapp E Series Santricity Management Plug Ins	All versions
Netapp E Series Santricity Storage Manager	All versions
Netapp E Series Santricity Web Services	All versions
Netapp Oncommand Balance	All versions
Netapp Oncommand Cloud Manager	All versions
Netapp Oncommand Insight	All versions
Netapp Oncommand Performance Manager	All versions
Netapp Oncommand Report	All versions
Netapp Oncommand Shift	All versions
Netapp Oncommand Unified Manager	All versions
Netapp Oncommand Unified Manager	All versions
Netapp Oncommand Workflow Automation	All versions
Netapp Storagegrid	Up to 9.0.4
Netapp Vasa Provider For Clustered Data Ontap	From 7.2
Netapp Virtual Storage Console	From 7.2

Configuration E

5 vulnerable

Vulnerable Software	Affected Versions
Apache Cassandra	From 2.1.0 to 2.1.22
Apache Cassandra	From 2.2.0 to 2.2.18
Apache Cassandra	From 3.0.0 to 3.0.22
Apache Cassandra	From 3.11.0 to 3.11.8
Apache Cassandra	Version 4.0.0 beta1

Configuration F

29 vulnerable

Vulnerable Software	Affected Versions
Redhat Enterprise Linux Desktop	Version 5.0
Redhat Enterprise Linux Desktop	Version 6.0
Redhat Enterprise Linux Desktop	Version 7.0
Redhat Enterprise Linux Eus	Version 6.7
Redhat Enterprise Linux Eus	Version 7.2
Redhat Enterprise Linux Eus	Version 7.3
Redhat Enterprise Linux Eus	Version 7.4
Redhat Enterprise Linux Eus	Version 7.5
Redhat Enterprise Linux Eus	Version 7.6
Redhat Enterprise Linux Eus	Version 7.7
Redhat Enterprise Linux Server	Version 5.0
Redhat Enterprise Linux Server	Version 6.0
Redhat Enterprise Linux Server	Version 7.0
Redhat Enterprise Linux Server Aus	Version 7.2
Redhat Enterprise Linux Server Aus	Version 7.3
Redhat Enterprise Linux Server Aus	Version 7.4
Redhat Enterprise Linux Server Aus	Version 7.6
Redhat Enterprise Linux Server Aus	Version 7.7
Redhat Enterprise Linux Server Eus	Version 6.7
Redhat Enterprise Linux Server Eus	Version 7.2
Redhat Enterprise Linux Server Tus	Version 7.2
Redhat Enterprise Linux Server Tus	Version 7.3
Redhat Enterprise Linux Server Tus	Version 7.6
Redhat Enterprise Linux Server Tus	Version 7.7
Redhat Enterprise Linux Workstation	Version 5.0
Redhat Enterprise Linux Workstation	Version 6.0
Redhat Enterprise Linux Workstation	Version 7.0
Redhat Satellite	Version 5.6
Redhat Satellite	Version 5.7

Configuration G

17 vulnerable

Vulnerable Software	Affected Versions
Opensuse Leap	Version 42.1
Opensuse Opensuse	Version 13.1
Opensuse Opensuse	Version 13.2
Suse Linux Enterprise Desktop	Version 12
Suse Linux Enterprise Desktop	Version 12 sp1
Suse Linux Enterprise Module For Legacy	Version 12
Suse Linux Enterprise Server	Version 10 sp4
Suse Linux Enterprise Server	Version 11 sp2
Suse Linux Enterprise Server	Version 11 sp3
Suse Linux Enterprise Server	Version 11 sp4
Suse Linux Enterprise Server	Version 12
Suse Linux Enterprise Server	Version 12 sp1
Suse Linux Enterprise Software Development Kit	Version 11 sp4
Suse Linux Enterprise Software Development Kit	Version 12 sp1
Suse Manager	Version 2.1
Suse Manager Proxy	Version 2.1
Suse Openstack Cloud	Version 5

Related CWEs

CWE-284

Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

References (119)

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00006.html

Source: secalert_us@oracle.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00009.html

Source: secalert_us@oracle.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00012.html

Source: secalert_us@oracle.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00021.html

Source: secalert_us@oracle.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00022.html

Source: secalert_us@oracle.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00026.html

Source: secalert_us@oracle.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00027.html

Source: secalert_us@oracle.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00039.html

Source: secalert_us@oracle.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00040.html

Source: secalert_us@oracle.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00042.html

Source: secalert_us@oracle.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00058.html

Source: secalert_us@oracle.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00059.html

Source: secalert_us@oracle.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00061.html

Source: secalert_us@oracle.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00067.html

Source: secalert_us@oracle.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00002.html

Source: secalert_us@oracle.com

Mailing ListThird Party Advisory

http://rhn.redhat.com/errata/RHSA-2016-0650.html

Source: secalert_us@oracle.com

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2016-0651.html

Source: secalert_us@oracle.com

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2016-0675.html

Source: secalert_us@oracle.com

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2016-0676.html

Source: secalert_us@oracle.com

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2016-0677.html

Source: secalert_us@oracle.com

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2016-0678.html

Source: secalert_us@oracle.com

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2016-0679.html

Source: secalert_us@oracle.com

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2016-0701.html

Source: secalert_us@oracle.com

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2016-0702.html

Source: secalert_us@oracle.com

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2016-0708.html

Source: secalert_us@oracle.com

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2016-0716.html

Source: secalert_us@oracle.com

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2016-0723.html

Source: secalert_us@oracle.com

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2016-1039.html

Source: secalert_us@oracle.com

Third Party Advisory

http://www.debian.org/security/2016/dsa-3558

Source: secalert_us@oracle.com

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2020/08/31/1

Source: secalert_us@oracle.com

Mailing List

http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html

Source: secalert_us@oracle.com

PatchVendor Advisory

http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html

Source: secalert_us@oracle.com

PatchThird Party Advisory

http://www.securityfocus.com/bid/86421

Source: secalert_us@oracle.com

Broken LinkThird Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1035596

Source: secalert_us@oracle.com

Broken LinkThird Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1037331

Source: secalert_us@oracle.com

Broken LinkThird Party AdvisoryVDB Entry

http://www.ubuntu.com/usn/USN-2963-1

Source: secalert_us@oracle.com

Third Party Advisory

http://www.ubuntu.com/usn/USN-2964-1

Source: secalert_us@oracle.com

Third Party Advisory

http://www.ubuntu.com/usn/USN-2972-1

Source: secalert_us@oracle.com

Third Party Advisory

https://access.redhat.com/errata/RHSA-2016:1430

Source: secalert_us@oracle.com

Third Party Advisory

https://access.redhat.com/errata/RHSA-2017:1216

Source: secalert_us@oracle.com

Third Party Advisory

https://kc.mcafee.com/corporate/index?page=content&id=SB10159

Source: secalert_us@oracle.com

Broken Link

https://lists.apache.org/thread.html/343558d982879bf88ec20dbf707f8c11255f8e219e81d45c4f8d0551%40%3Cdev.tomcat.apache.org%3E

Source: secalert_us@oracle.com

Mailing ListPatch

https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113%40%3Cdev.tomcat.apache.org%3E

Source: secalert_us@oracle.com

Mailing ListPatch

https://lists.apache.org/thread.html/388a323769f1dff84c9ec905455aa73fbcb20338e3c7eb131457f708%40%3Cdev.tomcat.apache.org%3E

Source: secalert_us@oracle.com

Mailing ListPatch

https://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b%40%3Cdev.tomcat.apache.org%3E

Source: secalert_us@oracle.com

Mailing ListPatch

https://lists.apache.org/thread.html/3d19773b4cf0377db62d1e9328bf9160bf1819f04f988315086931d7%40%3Cdev.tomcat.apache.org%3E

Source: secalert_us@oracle.com

Mailing ListPatch

https://lists.apache.org/thread.html/6af47120905aa7d8fe12f42e8ff2284fb338ba141d3b77b8c7cb61b3%40%3Cdev.tomcat.apache.org%3E

Source: secalert_us@oracle.com

Mailing ListPatch

https://lists.apache.org/thread.html/845312a10aabbe2c499fca94003881d2c79fc993d85f34c1f5c77424%40%3Cdev.tomcat.apache.org%3E

Source: secalert_us@oracle.com

Mailing ListPatch

https://lists.apache.org/thread.html/88855876c33f2f9c532ffb75bfee570ccf0b17ffa77493745af9a17a%40%3Cdev.tomcat.apache.org%3E

Source: secalert_us@oracle.com

Mailing ListPatch

https://lists.apache.org/thread.html/b5e3f51d28cd5d9b1809f56594f2cf63dcd6a90429e16ea9f83bbedc%40%3Cdev.tomcat.apache.org%3E

Source: secalert_us@oracle.com

Mailing ListPatch

https://lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95%40%3Cdev.tomcat.apache.org%3E

Source: secalert_us@oracle.com

Mailing ListPatch

https://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb%40%3Cdev.tomcat.apache.org%3E

Source: secalert_us@oracle.com

Mailing ListPatch

https://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c%40%3Cdev.tomcat.apache.org%3E

Source: secalert_us@oracle.com

Mailing ListPatch

https://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b%40%3Cdev.tomcat.apache.org%3E

Source: secalert_us@oracle.com

Mailing ListPatch

https://lists.apache.org/thread.html/r5f48b16573a11fdf0b557cc3d1d71423ecde8ee771c29f32334fa948%40%3Cdev.cassandra.apache.org%3E

Source: secalert_us@oracle.com

Mailing ListThird Party Advisory

https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E

Source: secalert_us@oracle.com

Mailing ListPatch

https://lists.apache.org/thread.html/rc3abf40b06c511d5693baf707d6444bf7745e6a1e343e6f530a12258%40%3Cuser.cassandra.apache.org%3E

Source: secalert_us@oracle.com

Mailing ListThird Party Advisory

https://security.gentoo.org/glsa/201606-18

Source: secalert_us@oracle.com

Third Party Advisory

https://security.netapp.com/advisory/ntap-20160420-0001/

Source: secalert_us@oracle.com

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00006.html