Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:16890
HistoryMay 02, 2019 - 5:29 a.m.

Sandbox Restrictions Bypass

2019-05-0205:29:23
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8

0.027 Low

EPSS

Percentile

90.5%

java is vulnerable to sandbox restrictions bypass. The invoke method of the java.lang.reflect.Method class in an AccessController doPrivileged block allows remote attackers to call setSecurityManager to bypass the sandbox restrictions.

References

0.027 Low

EPSS

Percentile

90.5%