- Vendor / Project
- Oracle
- Product
- Java SE
- Date added
- Mar 28, 2022
- Due date
- Apr 18, 2022
- Known ransomware use
- Unknown
- CWEs
- —
Description
The default Java security properties configuration did not restrict access to the com.sun.org.glassfish.external and com.sun.org.glassfish.gmbal packages. An untrusted Java application or applet could use these flaws to bypass Java sandbox restrictions.
Required action
Apply updates per vendor instructions.