Lack of data validation - Path Traversal In java-1.8.0-openjdk
Description
The Hotspot component in OpenJDK8 as packaged in Red Hat Enterprise Linux 6 and 7 allows local users to write to arbitrary files via a symlink attack.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version | Patched versions |
|---|---|---|---|
 rpm rhel7 | 1:1.8.0.51-1.b16.el7_1 | ||
rpm rhel6 | 1:1.8.0.51-0.b16.el6_6 |
Aliases
1. 2. 3.