CVE-2018-2811

Description

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Install). Supported versions that are affected are Java SE: 8u162 and 10. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Java SE executes to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: Applies to installation process on client deployment of Java. CVSS 3.0 Base Score 7.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).

Risk Information

Base Score

7.7

MODERATE

Vector

CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

EPSS Score

Exploitation Probability

0.161

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2018-2798,CVE-2018-2799,CVE-2018-2800,CVE-2018-2811,CVE-2018-2815 are affected in Java jdk (x64) 8.0.162(x64)	Windows
Vulnerabilities CVE-2018-2798,CVE-2018-2799,CVE-2018-2800,CVE-2018-2811,CVE-2018-2815 are affected in Java jdk 8.0.162	Windows
Vulnerabilities CVE-2018-2798,CVE-2018-2799,CVE-2018-2800,CVE-2018-2811,CVE-2018-2815 are affected in Java jre (x64) 8.0.162(x64)	Windows
Vulnerabilities CVE-2018-2798,CVE-2018-2799,CVE-2018-2800,CVE-2018-2811,CVE-2018-2815 are affected in Java jre 8.0.162	Windows
Multiple vulnerabilities are affected in Java SE Development Kit 10	Windows
Multiple vulnerabilities are affected in Java SE Development Kit (x64) Java SE Development Kit 8 Update 162 (64-bit)	Windows
Multiple vulnerabilities are affected in Java SE Development Kit Java SE Development Kit 8 Update 162 (64-bit)	Windows
Multiple vulnerabilities are affected in Java SE Development Kit (x64) 10	Windows
Multiple vulnerabilities are affected in Java SE Development Kit (x64) 8.0.1620	Windows
Multiple vulnerabilities are affected in Java SE Development Kit 8.0.1620	Windows
Multiple vulnerabilities are affected in Java Runtime Environment 1.8 8.0.1620	Windows
Multiple vulnerabilities are affected in Java Runtime Environment 1.8 (x64) 8.0.1620	Windows
CVE-2018-2811	NCM

Patch Details

Click to see the patches provided by ManageEngine for this CVE

Patch ID	Patch Description
PATCH-342255	Java Runtime Environment 1.8 (x64) (8.0.4310.10) (Manual Upload Required)
PATCH-342254	Java Runtime Environment 1.8 (8.0.4310.10) (Manual Upload Required)
PATCH-333701	Java SE Development Kit 8 Update 391 (64-bit) (8.0.3910.13) (JDK) (Manual Upload Required)
PATCH-349783	Java SE Development Kit (8.0.4610.11) (Manual Upload Required)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234