Authentication Bypass in Oracle Java SE and GraalVM Products
CVE-2024-21131

3.7LOW

Key Information:

Vendor

Oracle
Status
Java Se Jdk And Jre
Vendor
CVE Published:
16 July 2024

What is CVE-2024-21131?

A vulnerability in Oracle Java SE and GraalVM components allows unauthenticated attackers with network access to compromise the affected products. With this issue, attackers can potentially gain unauthorized access to sensitive data, manipulate or delete it through accessible APIs. This threat extends to Java environments running sandboxed applications that may load untrusted code. Organizations using these products should update to secure versions immediately to protect against potential exploitation.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Java SE JDK and JRE Oracle Java SE:8u411

Java SE JDK and JRE Oracle Java SE:8u411-perf

Java SE JDK and JRE Oracle Java SE:11.0.23

References

https://www.oracle.com/security-alerts/cpujul2024.html
vendor-advisory
https://security.netapp.com/advisory/ntap-20240719-0008/

CVSS V3.1

Score:
3.7
Severity:
LOW
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

JSON
.