Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveRedhatCVE-2011-2514
HistoryMay 14, 2014 - 12:55 a.m.

CVE-2011-2514

2014-05-1400:55:04
CWE-264
redhat
web.nvd.nist.gov
36
cve-2011-2514
information security
java
jnlp
icedtea6
icedtea-web
remote attack

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

6.3

Confidence

Low

EPSS

0.011

Percentile

84.6%

JSON

The Java Network Launching Protocol (JNLP) implementation in IcedTea6 1.9.x before 1.9.9 and before 1.8.9, and IcedTea-Web 1.1.x before 1.1.1 and before 1.0.4, allows remote attackers to trick victims into granting access to local files by modifying the content of the Java Web Start Security Warning dialog box to represent a different filename than the file for which access will be granted.

Affected configurations

Nvd
Node
redhaticedtea-webRange≤1.0.3
OR
redhaticedtea-webMatch1.0
OR
redhaticedtea-webMatch1.0.1
OR
redhaticedtea-webMatch1.0.2
OR
redhaticedtea-webMatch1.1
Node
redhaticedtea6Range≤1.8.8
OR
redhaticedtea6Match1.8
OR
redhaticedtea6Match1.8.1
OR
redhaticedtea6Match1.8.2
OR
redhaticedtea6Match1.8.3
OR
redhaticedtea6Match1.8.4
OR
redhaticedtea6Match1.8.5
OR
redhaticedtea6Match1.8.6
OR
redhaticedtea6Match1.8.7
OR
redhaticedtea6Match1.9.1
OR
redhaticedtea6Match1.9.2
OR
redhaticedtea6Match1.9.3
OR
redhaticedtea6Match1.9.4
OR
redhaticedtea6Match1.9.5
OR
redhaticedtea6Match1.9.6
OR
redhaticedtea6Match1.9.7
OR
redhaticedtea6Match1.9.8
VendorProductVersionCPE
redhaticedtea-web*cpe:2.3:a:redhat:icedtea-web:*:*:*:*:*:*:*:*
redhaticedtea-web1.0cpe:2.3:a:redhat:icedtea-web:1.0:*:*:*:*:*:*:*
redhaticedtea-web1.0.1cpe:2.3:a:redhat:icedtea-web:1.0.1:*:*:*:*:*:*:*
redhaticedtea-web1.0.2cpe:2.3:a:redhat:icedtea-web:1.0.2:*:*:*:*:*:*:*
redhaticedtea-web1.1cpe:2.3:a:redhat:icedtea-web:1.1:*:*:*:*:*:*:*
redhaticedtea6*cpe:2.3:a:redhat:icedtea6:*:*:*:*:*:*:*:*
redhaticedtea61.8cpe:2.3:a:redhat:icedtea6:1.8:*:*:*:*:*:*:*
redhaticedtea61.8.1cpe:2.3:a:redhat:icedtea6:1.8.1:*:*:*:*:*:*:*
redhaticedtea61.8.2cpe:2.3:a:redhat:icedtea6:1.8.2:*:*:*:*:*:*:*
redhaticedtea61.8.3cpe:2.3:a:redhat:icedtea6:1.8.3:*:*:*:*:*:*:*
Rows per page:
1-10 of 221

Related

nvd 1
prion 1
cvelist 1
veracode 1
ubuntucve 1
debiancve 1
nessus 7
openvas 7
ubuntu 1
fedora 1
redhat 1
oraclelinux 1
nvd
nvd
CVE-2011-2514
2014-05-14 00:55:04
prion
prion
Design/Logic Flaw
2014-05-14 00:55:00
cvelist
cvelist
CVE-2011-2514
2014-05-14 00:00:00
veracode
veracode
Arbitrary Code Execution
2020-04-10 01:01:24
ubuntucve
ubuntucve
CVE-2011-2514
2011-07-20 00:00:00
debiancve
debiancve
CVE-2011-2514
2014-05-14 00:55:04
nessus
nessus
Fedora 15 : icedtea-web-1.0.4-1.fc15 (2011-9541)
2011-07-25 00:00:00
RHEL 6 : icedtea-web (RHSA-2011:1100)
2011-07-28 00:00:00
openSUSE Security Update : icedtea-web (openSUSE-SU-2011:0829-1)
2014-06-13 00:00:00
openvas
openvas
Fedora Update for icedtea-web FEDORA-2011-9541
2011-07-27 00:00:00
RedHat Update for icedtea-web RHSA-2011:1100-01
2012-06-06 00:00:00
Ubuntu Update for icedtea-web USN-1178-1
2011-08-02 00:00:00
ubuntu
ubuntu
IcedTea-Web, OpenJDK 6 vulnerabilities
2011-07-27 00:00:00
fedora
fedora
[SECURITY] Fedora 15 Update: icedtea-web-1.0.4-1.fc15
2011-07-22 19:33:36
redhat
redhat
(RHSA-2011:1100) Moderate: icedtea-web security update
2011-07-27 00:00:00
oraclelinux
oraclelinux
icedtea-web security update
2011-07-27 00:00:00

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

6.3

Confidence

Low

EPSS

0.011

Percentile

84.6%

JSON
Related for CVE-2011-2514
nvd1prion1cvelist1veracode1ubuntucve1debiancve1nessus7openvas7ubuntu1fedora1redhat1oraclelinux1