Authentication Bypass in Oracle Java SE and GraalVM Products

CVE-2024-21131

Summary

A vulnerability in Oracle Java SE and GraalVM components allows unauthenticated attackers with network access to compromise the affected products. With this issue, attackers can potentially gain unauthorized access to sensitive data, manipulate or delete it through accessible APIs. This threat extends to Java environments running sandboxed applications that may load untrusted code. Organizations using these products should update to secure versions immediately to protect against potential exploitation.

References