Home > Vulnerability Database > CVE-2013-1926

Mend.io Vulnerability Database

CVE-2013-1926

Good to know:

Date: April 29, 2013

The IcedTea-Web plugin before 1.2.3 and 1.3.x before 1.3.2 uses the same class loader for applets with the same codebase path but from different domains, which allows remote attackers to obtain sensitive information or possibly alter other applets via a crafted applet.

Language: Java

Severity Score

4.8

Related Resources (25)

Url: http://rhn.redhat.com/errata/RHSA-2013-0753.html

Url: http://www.ubuntu.com/usn/USN-1804-1

Url: https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0123

Url: http://lists.opensuse.org/opensuse-updates/2013-04/msg00106.html

Url: http://lists.opensuse.org/opensuse-updates/2013-06/msg00030.html

Url: http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00013.html

Url: http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-April/022790.html

Url: http://www.mandriva.com/security/advisories?name=MDVSA-2013:146

Url: http://lists.opensuse.org/opensuse-updates/2013-06/msg00034.html

Url: http://icedtea.classpath.org/hg/release/icedtea-web-1.3/rev/25dd7c7ac39c

Url: http://secunia.com/advisories/53117

Url: https://bugzilla.redhat.com/show_bug.cgi?id=916774

Url: http://www.securityfocus.com/bid/59281

Url: http://icedtea.classpath.org/hg/release/icedtea-web-1.2/rev/34b6f60ae586

Url: https://nvd.nist.gov/vuln/detail/CVE-2013-1926

Url: http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00020.html

Url: http://secunia.com/advisories/53109

Url: http://lists.opensuse.org/opensuse-updates/2013-05/msg00032.html

Url: http://osvdb.org/92543

Url: https://exchange.xforce.ibmcloud.com/vulnerabilities/83642

Url: http://lists.opensuse.org/opensuse-updates/2013-05/msg00003.html

Url: http://lists.opensuse.org/opensuse-updates/2013-06/msg00101.html

Url: https://access.redhat.com/security/cve/CVE-2013-1926

Url: http://icedtea.classpath.org/hg/release/icedtea-web-1.2/file/icedtea-web-1.2.3/NEWS

Url: https://www.mend.io/vulnerability-database/CVE-2013-1926

Severity Score

4.8

Weakness Type (CWE)

Insufficient Information

NVD-CWE-noinfo

Top Fix

Upgrade Version

Upgrade to version icedtea-web-1.4-branchpoint

Learn More

CVSS v3.1

Base Score:	4.8
Attack Vector (AV):	NETWORK
Attack Complexity (AC):	HIGH
Privileges Required (PR):	NONE
User Interaction (UI):	NONE
Scope (S):	UNCHANGED
Confidentiality (C):	LOW
Integrity (I):	LOW
Availability (A):	NONE

CVSS v2

Base Score:	5.8
Access Vector (AV):	NETWORK
Access Complexity (AC):	MEDIUM
Authentication (AU):	NONE
Confidentiality (C):	PARTIAL
Integrity (I):	PARTIAL
Availability (A):	NONE
Additional information:

Mend.io Vulnerability Database

We found results for “”

CVE-2013-1926

Good to know:

Date: April 29, 2013

Language: Java

Severity Score

Related Resources (25)

Severity Score

Weakness Type (CWE)

Top Fix

Upgrade Version

CVSS v3.1

CVSS v2

Do you need more information?