Vulnerability in Sun Jdk

CVE-2009-2673

The proxy mechanism implementation in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, allows remote attackers to bypass intended access restrictions and connect to arbitrary sites via unspecified vectors, related to a declaration that lacks the final keyword.

EPSS: 0.048 (91.1th percentile) — read the EPSS interpretation.

Affected products

  • Sun Jdk — versions 5.0, 6
  • Sun Jre — versions 5.0, 6
  • N/a — versions n/a

Weakness classification (CWE)

References