Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
attackerkbAttackerKBAKB:3851E11C-8BE5-48FA-9728-3866A434EA95
HistoryApr 17, 2013 - 12:00 a.m.

CVE-2013-2423

2013-04-1700:00:00
attackerkb.com
12

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

0.967

Percentile

99.7%

JSON

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, and OpenJDK 7, allows remote attackers to affect integrity via unknown vectors related to HotSpot. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from the original researcher that this vulnerability allows remote attackers to bypass permission checks by the MethodHandles method and modify arbitrary public final fields using reflection and type confusion, as demonstrated using integer and double fields to disable the security manager.

Recent assessments:

Assessed Attacker Value: 0
Assessed Attacker Value: 0Assessed Attacker Value: 0

References

Related

prion 1
cvelist 1
ubuntucve 1
veracode 1
nvd 1
metasploit 1
cisa_kev 1
cve 1
checkpoint_advisories 3
saint 4
canvas 1
symantec 1
threatpost 3
openvas 21
nessus 27
centos 2
redhat 4
oraclelinux 2
securelist 1
fedora 3
ubuntu 1
amazon 1
ibm 13
securityvulns 1
gentoo 2
prion
prion
Type confusion
2013-04-17 18:55:00
cvelist
cvelist
CVE-2013-2423
2013-04-17 15:00:00
ubuntucve
ubuntucve
CVE-2013-2423
2013-04-17 00:00:00
veracode
veracode
Permission Check Bypass
2019-05-02 04:44:37
nvd
nvd
CVE-2013-2423
2013-04-17 18:55:07
metasploit
metasploit
Java Applet Reflection Type Confusion Remote Code Execution
2013-04-20 06:43:13
cisa_kev
cisa_kev
Oracle JRE Unspecified Vulnerability
2022-05-25 00:00:00
cve
cve
CVE-2013-2423
2013-04-17 18:55:07
checkpoint_advisories
checkpoint_advisories
Java Applet Reflection Type Confusion Remote Code Execution (CVE-2013-2423)
2013-04-28 00:00:00
Oracle Java Final Field Overwrite (CVE-2013-2423)
2013-05-05 00:00:00
Infinity Exploit Kit Landing Page (CVE-2013-1347; CVE-2013-2423; CVE-2013-2465; CVE-2014-0322; CVE-2014-0502; CVE-2014-1776)
2014-06-10 00:00:00
saint
saint
Java Runtime Environment Hotspot final field vulnerability
2013-04-24 00:00:00
Java Runtime Environment Hotspot final field vulnerability
2013-04-24 00:00:00
Java Runtime Environment Hotspot final field vulnerability
2013-04-24 00:00:00
canvas
canvas
Immunity Canvas: JAVA_DYNAMICBINDING
2013-04-17 18:55:00
symantec
symantec
Oracle Java Runtime Environment CVE-2013-2423 Security Bypass Vulnerability
2013-04-16 00:00:00
threatpost
threatpost
65 Sites Compromised in ZeroAccess Trojan Attacks
2013-06-19 16:05:05
IE 8 0Day in Sunshop Targeted Espionage Malware Campaign
2013-05-21 14:40:44
Counter.php Redirecting to Sites Peddling Styx Exploit Kit
2013-08-12 14:52:37
openvas
openvas
Oracle Java SE Multiple Vulnerabilities -03 (May 2013) - Windows
2013-05-06 00:00:00
Oracle Java SE Multiple Vulnerabilities -03 May 13 (Windows)
2013-05-06 00:00:00
Amazon Linux: Security Advisory (ALAS-2013-183)
2015-09-08 00:00:00
nessus
nessus
openSUSE Security Update : java-1_7_0-openjdk (openSUSE-SU-2013:0964-1)
2014-06-13 00:00:00
openSUSE Security Update : java-1_7_0-openjdk (openSUSE-SU-2013:0745-1)
2014-06-13 00:00:00
CentOS 6 : java-1.7.0-openjdk (CESA-2013:0751)
2013-04-19 00:00:00
centos
centos
java security update
2013-04-17 22:33:59
java security update
2013-04-17 21:01:08
redhat
redhat
(RHSA-2013:0751) Critical: java-1.7.0-openjdk security update
2013-04-17 00:00:00
(RHSA-2013:0752) Important: java-1.7.0-openjdk security update
2013-04-17 00:00:00
(RHSA-2013:0822) Critical: java-1.7.0-ibm security update
2013-05-14 00:00:00
oraclelinux
oraclelinux
java-1.7.0-openjdk security update
2013-04-17 00:00:00
java-1.7.0-openjdk security update
2013-04-17 00:00:00
securelist
securelist
Investigation Report for the September 2014 Equation malware detection incident in the US
2017-11-16 10:00:34
fedora
fedora
[SECURITY] Fedora 19 Update: java-1.7.0-openjdk-1.7.0.19-2.3.9.6.fc19
2013-04-25 14:19:39
[SECURITY] Fedora 18 Update: java-1.7.0-openjdk-1.7.0.19-2.3.9.1.fc18
2013-04-18 02:47:29
[SECURITY] Fedora 17 Update: java-1.7.0-openjdk-1.7.0.19-2.3.9.1.fc17
2013-04-19 05:01:04
ubuntu
ubuntu
OpenJDK 7 vulnerabilities
2013-04-23 00:00:00
amazon
amazon
Critical: java-1.7.0-openjdk
2013-04-18 13:59:00
ibm
ibm
Security Bulletin: Information regarding security vulnerability in IBM SDK for Java that is shipped with IBM WebSphere Application Server and addressed by Oracle CPU April 2013 (CVE-2013-0169)
2022-09-25 21:06:56
Security Bulletin: WebSphere Application Server Community Edition 3.0.0.3 Oracle CPU April 2013
2022-09-25 21:06:56
Security Bulletin: IBM WebSphere Lombardi Edition – Information regarding security vulnerability in IBM SDK for Java that shipped with IBM WebSphere Application Server and addressed by Oracle CPU April 2013 (CVE-2013-0169)
2022-09-25 21:06:56
securityvulns
securityvulns
Oracle Java / OpenJDK multiple security vulnerabilities
2013-04-22 00:00:00
gentoo
gentoo
IcedTea JDK: Multiple vulnerabilities
2014-06-29 00:00:00
Oracle JRE/JDK: Multiple vulnerabilities
2014-01-27 00:00:00

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

0.967

Percentile

99.7%

JSON
Related for AKB:3851E11C-8BE5-48FA-9728-3866A434EA95
prion1cvelist1ubuntucve1veracode1nvd1metasploit1cisa_kev1cve1checkpoint_advisories3saint4canvas1symantec1threatpost3openvas21nessus27centos2redhat4oraclelinux2securelist1fedora3ubuntu1amazon1ibm13securityvulns1gentoo2