CVE-2013-2453

published 2013-06-18

CVE-2013-2453: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier allows remote…

medium 5 CVSS 3.1

AV N AC L Au N C N I P A N

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier allows remote attackers to affect integrity via vectors related to JMX. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is due to a missing check for "package access" by the MBeanServer Introspector.

Affected

10 ranges

Vendor	Product	Version range	Fixed in
oracle	jdk	<= 1.7.0	—
oracle	jdk	<= 1.6.0	—
oracle	jdk	—	—
oracle	jdk	—	—
oracle	jre	<= 1.7.0	—
oracle	jre	<= 1.6.0	—
oracle	jre	—	—
oracle	jre	—	—
sun	jdk	—	—
sun	jre	—	—