NVD Vulnerability Detail

CVE-2017-10342

Summary	Vulnerability in the Java Advanced Management Console component of Oracle Java SE (subcomponent: Server). The supported version that is affected is Java Advanced Management Console: 2.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java Advanced Management Console. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java Advanced Management Console. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).
Publication Date	Oct. 20, 2017, 2:29 a.m.
Registration Date	Jan. 26, 2021, 1:11 p.m.
Last Update	Nov. 21, 2024, 12:05 p.m.

Affected software configurations

Configuration1		or higher	or less	more than	less than
cpe:2.3:a:oracle:java_advanced_management_console:2.7:::::::*

Related information, measures and tools

No	URL	タグ
1	http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html	Patch Vendor Advisory
2	http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html	Patch Vendor Advisory
3	http://www.securityfocus.com/bid/101428	Third Party Advisory VDB Entry
4	http://www.securityfocus.com/bid/101428	Third Party Advisory VDB Entry
5	http://www.securitytracker.com/id/1039596	Third Party Advisory VDB Entry
6	http://www.securitytracker.com/id/1039596	Third Party Advisory VDB Entry
7	https://security.netapp.com/advisory/ntap-20171019-0001/
8	https://security.netapp.com/advisory/ntap-20171019-0001/

Common Vulnerabilities List

JVN Vulnerability Information

Oracle Java SE の Java Advanced Management Console における Server に関する脆弱性

Title	Oracle Java SE の Java Advanced Management Console における Server に関する脆弱性
Summary	Oracle Java SE の Java Advanced Management Console には、Server に関する処理に不備があるため、可用性に影響のある脆弱性が存在します。
Possible impacts	リモートの攻撃者により、サービス運用妨害 (DoS) 攻撃が行われる可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	Oct. 17, 2017, midnight
Registration Date	Oct. 27, 2017, 5:45 p.m.
Last Update	Oct. 27, 2017, 5:45 p.m.

Affected System

オラクル

Java Advanced Management Console 2.7

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2017-10342	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10342
National Vulnerability Database (NVD)
2	CVE-2017-10342	https://nvd.nist.gov/vuln/detail/CVE-2017-10342

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-noinfo	https://www.ipa.go.jp/security/vuln/CWE.html#CWEnoinfo

ベンダー情報

No	Name	URL
Oracle Critical Patch Update
1	Oracle Critical Patch Update Advisory - October 2017	http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html
2	Text Form of Oracle Critical Patch Update - October 2017 Risk Matrices	http://www.oracle.com/technetwork/security-advisory/cpuoct2017verbose-3236627.html
富士通セキュリティ情報
3	Oracle Corporation Javaプラグインの脆弱性に関するお知らせ	http://www.fmworld.net/biz/common/oracle/20171018.html

その他

No	Name	URL
IPA 重要なセキュリティ情報
1	Oracle Java の脆弱性対策について(CVE-2017-10346等)	https://www.ipa.go.jp/security/ciadr/vul/20171018-jre.html
JPCERT 注意喚起
2	JPCERT-AT-2017-0041	http://www.jpcert.or.jp/at/2017/at170041.html

Change Log

No	Changed Details	Date of change
0	[2017年10月27日] 掲載	Feb. 17, 2018, 10:37 a.m.