CVE-2019-2684
- Source
- https://cve.org/CVERecord?id=CVE-2019-2684
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2019-2684.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2019-2684
- Downstream
- Related
- Published
- 2019-04-23T19:32:55.443Z
- Modified
- 2026-07-07T08:50:12.172360038Z
- Severity
-
- 5.9 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N CVSS Calculator
- Summary
- [none]
- Details
-
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI). Supported versions that are affected are Java SE: 7u211, 8u202, 11.0.2 and 12; Java SE Embedded: 8u201. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.9 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N).
- Database specific
{ "unresolved_ranges": [ { "source": "CPE_RANGE", "vendor_product": "hp:xp7_command_view", "extracted_events": [ { "fixed": "8.6.5-00" } ], "cpes": [ "cpe:2.3:a:hp:xp7_command_view:*:*:*:*:advanced:*:*:*" ] }, { "source": "CPE_STRING", "vendor_product": "apache:cassandra", "extracted_events": [ { "introduced": "4.0.0-beta1" }, { "last_affected": "4.0.0-beta1" } ], "cpes": [ "cpe:2.3:a:apache:cassandra:4.0.0:beta1:*:*:*:*:*:*" ] }, { "source": "CPE_STRING", "vendor_product": "canonical:ubuntu_linux", "extracted_events": [ { "introduced": "16.04" }, { "last_affected": "16.04" }, { "introduced": "18.04" }, { "last_affected": "18.04" }, { "introduced": "18.10" }, { "last_affected": "18.10" }, { "introduced": "19.04" }, { "last_affected": "19.04" } ], "cpes": [ "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*", "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*", "cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:*", "cpe:2.3:o:canonical:ubuntu_linux:19.04:*:*:*:*:*:*:*" ] }, { "source": "CPE_STRING", "vendor_product": "debian:debian_linux", "extracted_events": [ { "introduced": "8.0" }, { "last_affected": "8.0" }, { "introduced": "9.0" }, { "last_affected": "9.0" } ], "cpes": [ "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*", "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*" ] }, { "source": "CPE_STRING", "vendor_product": "opensuse:leap", "extracted_events": [ { "introduced": "15.0" }, { "last_affected": "15.0" }, { "introduced": "42.3" }, { "last_affected": "42.3" } ], "cpes": [ "cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*", "cpe:2.3:o:opensuse:leap:42.3:*:*:*:*:*:*:*" ] }, { "source": "CPE_STRING", "vendor_product": "oracle:jdk", "extracted_events": [ { "introduced": "1.7.0-update211" }, { "last_affected": "1.7.0-update211" }, { "introduced": "1.8.0-update201" }, { "last_affected": "1.8.0-update201" }, { "introduced": "1.8.0-update202" }, { "last_affected": "1.8.0-update202" }, { "introduced": "11.0.2" }, { "last_affected": "11.0.2" }, { "introduced": "12" }, { "last_affected": "12" } ], "cpes": [ "cpe:2.3:a:oracle:jdk:1.7.0:update211:*:*:*:*:*:*", "cpe:2.3:a:oracle:jdk:1.8.0:update201:*:*:*:*:*:*", "cpe:2.3:a:oracle:jdk:1.8.0:update202:*:*:*:*:*:*", "cpe:2.3:a:oracle:jdk:11.0.2:*:*:*:*:*:*:*", "cpe:2.3:a:oracle:jdk:12:*:*:*:*:*:*:*" ] }, { "source": "CPE_STRING", "vendor_product": "oracle:jre", "extracted_events": [ { "introduced": "1.7.0-update211" }, { "last_affected": "1.7.0-update211" }, { "introduced": "1.8.0-update201" }, { "last_affected": "1.8.0-update201" }, { "introduced": "1.8.0-update202" }, { "last_affected": "1.8.0-update202" }, { "introduced": "11.0.2" }, { "last_affected": "11.0.2" }, { "introduced": "12" }, { "last_affected": "12" } ], "cpes": [ "cpe:2.3:a:oracle:jre:1.7.0:update211:*:*:*:*:*:*", "cpe:2.3:a:oracle:jre:1.8.0:update201:*:*:*:*:*:*", "cpe:2.3:a:oracle:jre:1.8.0:update202:*:*:*:*:*:*", "cpe:2.3:a:oracle:jre:11.0.2:*:*:*:*:*:*:*", "cpe:2.3:a:oracle:jre:12:*:*:*:*:*:*:*" ] }, { "source": "CPE_STRING", "vendor_product": "redhat:enterprise_linux", "extracted_events": [ { "introduced": "8.0" }, { "last_affected": "8.0" } ], "cpes": [ "cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*" ] }, { "source": "CPE_STRING", "vendor_product": "redhat:enterprise_linux_desktop", "extracted_events": [ { "introduced": "6.0" }, { "last_affected": "6.0" }, { "introduced": "7.0" }, { "last_affected": "7.0" } ], "cpes": [ "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*", "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*" ] }, { "source": "CPE_STRING", "vendor_product": "redhat:enterprise_linux_eus", "extracted_events": [ { "introduced": "8.1" }, { "last_affected": "8.1" }, { "introduced": "8.2" }, { "last_affected": "8.2" }, { "introduced": "8.4" }, { "last_affected": "8.4" }, { "introduced": "8.6" }, { "last_affected": "8.6" } ], "cpes": [ "cpe:2.3:o:redhat:enterprise_linux_eus:8.1:*:*:*:*:*:*:*", "cpe:2.3:o:redhat:enterprise_linux_eus:8.2:*:*:*:*:*:*:*", "cpe:2.3:o:redhat:enterprise_linux_eus:8.4:*:*:*:*:*:*:*", "cpe:2.3:o:redhat:enterprise_linux_eus:8.6:*:*:*:*:*:*:*" ] }, { "source": "CPE_STRING", "vendor_product": "redhat:enterprise_linux_server", "extracted_events": [ { "introduced": "6.0" }, { "last_affected": "6.0" }, { "introduced": "7.0" }, { "last_affected": "7.0" } ], "cpes": [ "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*", "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*" ] }, { "source": "CPE_STRING", "vendor_product": "redhat:enterprise_linux_server_aus", "extracted_events": [ { "introduced": "8.2" }, { "last_affected": "8.2" }, { "introduced": "8.4" }, { "last_affected": "8.4" }, { "introduced": "8.6" }, { "last_affected": "8.6" } ], "cpes": [ "cpe:2.3:o:redhat:enterprise_linux_server_aus:8.2:*:*:*:*:*:*:*", "cpe:2.3:o:redhat:enterprise_linux_server_aus:8.4:*:*:*:*:*:*:*", "cpe:2.3:o:redhat:enterprise_linux_server_aus:8.6:*:*:*:*:*:*:*" ] }, { "source": "CPE_STRING", "vendor_product": "redhat:enterprise_linux_server_tus", "extracted_events": [ { "introduced": "8.2" }, { "last_affected": "8.2" }, { "introduced": "8.4" }, { "last_affected": "8.4" }, { "introduced": "8.6" }, { "last_affected": "8.6" } ], "cpes": [ "cpe:2.3:o:redhat:enterprise_linux_server_tus:8.2:*:*:*:*:*:*:*", "cpe:2.3:o:redhat:enterprise_linux_server_tus:8.4:*:*:*:*:*:*:*", "cpe:2.3:o:redhat:enterprise_linux_server_tus:8.6:*:*:*:*:*:*:*" ] }, { "source": "CPE_STRING", "vendor_product": "redhat:enterprise_linux_workstation", "extracted_events": [ { "introduced": "6.0" }, { "last_affected": "6.0" }, { "introduced": "7.0" }, { "last_affected": "7.0" } ], "cpes": [ "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*", "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*" ] }, { "source": "CPE_STRING", "vendor_product": "redhat:openshift_container_platform", "extracted_events": [ { "introduced": "3.11" }, { "last_affected": "3.11" } ], "cpes": [ "cpe:2.3:a:redhat:openshift_container_platform:3.11:*:*:*:*:*:*:*" ] }, { "source": "CPE_STRING", "vendor_product": "redhat:satellite", "extracted_events": [ { "introduced": "5.8" }, { "last_affected": "5.8" } ], "cpes": [ "cpe:2.3:a:redhat:satellite:5.8:*:*:*:*:*:*:*" ] } ] }- References
-
- https://lists.apache.org/thread.html/38a01302c92ae513910d8c851a2d111736565bd698be4e3af3e4c063%40%3Cdev.tomcat.apache.org%3E
- https://lists.apache.org/thread.html/43530b91506e2e0c11cfbe691173f5df8c48f51b98262426d7493b67%40%3Cannounce.tomcat.apache.org%3E
- https://lists.apache.org/thread.html/71bd3e4e222479c266eaafc8d0c171ef5782a69b52f68df11b650ed7%40%3Cusers.tomcat.apache.org%3E
- https://lists.apache.org/thread.html/c58d6c3b49c615916b163809f963a55421cac2264885739508e68108%40%3Cannounce.apache.org%3E
- https://lists.apache.org/thread.html/f7f54b4888060d99f59993f006e25005a2b58db0c07ff866bdcd6f17%40%3Cdev.tomcat.apache.org%3E
- https://lists.apache.org/thread.html/r1fd117082b992e7d43c1286e966c285f98aa362e685695d999ff42f7%40%3Cuser.cassandra.apache.org%3E
- https://lists.apache.org/thread.html/r3bbb800a816d0a51eccc5a228c58736960a9fffafa581a225834d97d%40%3Cdev.tomcat.apache.org%3E
- https://lists.apache.org/thread.html/r48c1444845fe15a823e1374674bfc297d5008a5453788099ea14caf0%40%3Cdev.tomcat.apache.org%3E
- https://lists.apache.org/thread.html/r6ccee4e849bc77df0840c7f853f6bd09d426f6741247da2b7429d5d9%40%3Cdev.tomcat.apache.org%3E
- https://lists.apache.org/thread.html/r718e01f61b35409a4f7a3ccbc1cb5136a1558a9f9c2cb8d4ca9be1ce%40%3Cuser.cassandra.apache.org%3E
- https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E
- https://lists.apache.org/thread.html/rab8d90d28f944d84e4d7852f355a25c89451ae02c2decc4d355a9cfc%40%3Cuser.cassandra.apache.org%3E
- https://lists.apache.org/thread.html/raba0fabaf4d56d4325ab2aca8814f0b30a237ab83d8106b115ee279a%40%3Cdev.tomcat.apache.org%3E
- https://lists.apache.org/thread.html/rcd7544b24d8fc32b7950ec4c117052410b661babaa857fb1fc641152%40%3Cdev.cassandra.apache.org%3E
- https://lists.apache.org/thread.html/rcd7544b24d8fc32b7950ec4c117052410b661babaa857fb1fc641152%40%3Cuser.cassandra.apache.org%3E
- https://support.f5.com/csp/article/K11175903?utm_source=f5support&%3Butm_medium=RSS
- http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00007.html
- http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00058.html
- http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00059.html
- http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00013.html
- http://www.openwall.com/lists/oss-security/2020/09/01/4
- https://access.redhat.com/errata/RHBA-2019:0959
- https://access.redhat.com/errata/RHSA-2019:1146
- https://access.redhat.com/errata/RHSA-2019:1163
- https://access.redhat.com/errata/RHSA-2019:1164
- https://access.redhat.com/errata/RHSA-2019:1165
- https://access.redhat.com/errata/RHSA-2019:1166
- https://access.redhat.com/errata/RHSA-2019:1238
- https://access.redhat.com/errata/RHSA-2019:1325
- https://access.redhat.com/errata/RHSA-2019:1518
- https://lists.debian.org/debian-lts-announce/2019/05/msg00011.html
- https://seclists.org/bugtraq/2019/May/75
- https://security.gentoo.org/glsa/201908-10
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03959en_us
- https://usn.ubuntu.com/3975-1/
- https://www.debian.org/security/2019/dsa-4453
- http://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html
Affected packages
Git / github.com/apache/cassandra
Affected ranges
- Type
- GIT
- Repo
- https://github.com/apache/cassandra
- Events
-
IntroducedFixedIntroducedFixedIntroducedFixedIntroducedFixed
- Database specific
{ "cpe": "cpe:2.3:a:apache:cassandra:*:*:*:*:*:*:*:*", "source": "CPE_RANGE", "extracted_events": [ { "introduced": "2.1.0" }, { "fixed": "2.1.22" }, { "introduced": "2.2.0" }, { "fixed": "2.2.18" }, { "introduced": "3.0.0" }, { "fixed": "3.0.22" }, { "introduced": "3.11.0" }, { "fixed": "3.11.8" } ] }
Affected versions
cassandra-2.*
cassandra-2.2.0
cassandra-2.2.1
cassandra-2.2.10
cassandra-2.2.11
cassandra-2.2.12
cassandra-2.2.13
cassandra-2.2.14
cassandra-2.2.15
cassandra-2.2.16
cassandra-2.2.17
cassandra-2.2.2
cassandra-2.2.3
cassandra-2.2.4
cassandra-2.2.5
cassandra-2.2.6
cassandra-2.2.8
cassandra-2.2.9
cassandra-3.*
cassandra-3.0.0
cassandra-3.0.1
cassandra-3.0.10
cassandra-3.0.11
cassandra-3.0.12
cassandra-3.0.13
cassandra-3.0.14
cassandra-3.0.15
cassandra-3.0.16
cassandra-3.0.17
cassandra-3.0.18
cassandra-3.0.19
cassandra-3.0.20
cassandra-3.0.21
cassandra-3.0.3
cassandra-3.0.4
cassandra-3.0.5
cassandra-3.0.6
cassandra-3.0.7
cassandra-3.0.9
cassandra-3.11.0
cassandra-3.11.1
cassandra-3.11.2
cassandra-3.11.3
cassandra-3.11.4
cassandra-3.11.5
cassandra-3.11.6
Git / github.com/apache/tomcat
Affected ranges
- Type
- GIT
- Repo
- https://github.com/apache/tomcat
- Events
-
IntroducedLast affectedIntroducedLast affectedIntroducedLast affectedIntroducedLast affected
- Database specific
{ "cpe": [ "cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*", "cpe:2.3:a:apache:tomcat:9.0.0:milestone1:*:*:*:*:*:*", "cpe:2.3:a:apache:tomcat:9.0.0:milestone10:*:*:*:*:*:*", "cpe:2.3:a:apache:tomcat:9.0.0:milestone11:*:*:*:*:*:*", "cpe:2.3:a:apache:tomcat:9.0.0:milestone12:*:*:*:*:*:*", "cpe:2.3:a:apache:tomcat:9.0.0:milestone13:*:*:*:*:*:*", "cpe:2.3:a:apache:tomcat:9.0.0:milestone14:*:*:*:*:*:*", "cpe:2.3:a:apache:tomcat:9.0.0:milestone15:*:*:*:*:*:*", "cpe:2.3:a:apache:tomcat:9.0.0:milestone16:*:*:*:*:*:*", "cpe:2.3:a:apache:tomcat:9.0.0:milestone17:*:*:*:*:*:*", "cpe:2.3:a:apache:tomcat:9.0.0:milestone18:*:*:*:*:*:*", "cpe:2.3:a:apache:tomcat:9.0.0:milestone19:*:*:*:*:*:*", "cpe:2.3:a:apache:tomcat:9.0.0:milestone2:*:*:*:*:*:*", "cpe:2.3:a:apache:tomcat:9.0.0:milestone20:*:*:*:*:*:*", "cpe:2.3:a:apache:tomcat:9.0.0:milestone21:*:*:*:*:*:*", "cpe:2.3:a:apache:tomcat:9.0.0:milestone22:*:*:*:*:*:*", "cpe:2.3:a:apache:tomcat:9.0.0:milestone23:*:*:*:*:*:*", "cpe:2.3:a:apache:tomcat:9.0.0:milestone24:*:*:*:*:*:*", "cpe:2.3:a:apache:tomcat:9.0.0:milestone25:*:*:*:*:*:*", "cpe:2.3:a:apache:tomcat:9.0.0:milestone26:*:*:*:*:*:*", "cpe:2.3:a:apache:tomcat:9.0.0:milestone27:*:*:*:*:*:*", "cpe:2.3:a:apache:tomcat:9.0.0:milestone3:*:*:*:*:*:*", "cpe:2.3:a:apache:tomcat:9.0.0:milestone4:*:*:*:*:*:*", "cpe:2.3:a:apache:tomcat:9.0.0:milestone5:*:*:*:*:*:*", "cpe:2.3:a:apache:tomcat:9.0.0:milestone6:*:*:*:*:*:*", "cpe:2.3:a:apache:tomcat:9.0.0:milestone7:*:*:*:*:*:*", "cpe:2.3:a:apache:tomcat:9.0.0:milestone8:*:*:*:*:*:*", "cpe:2.3:a:apache:tomcat:9.0.0:milestone9:*:*:*:*:*:*" ], "source": [ "CPE_RANGE", "CPE_STRING" ], "extracted_events": [ { "introduced": "7.0.0" }, { "last_affected": "7.0.97" }, { "introduced": "8.5.0" }, { "last_affected": "8.5.47" }, { "introduced": "9.0.1" }, { "last_affected": "9.0.28" }, { "introduced": "9.0.0-milestone1" }, { "last_affected": "9.0.0-milestone1" }, { "introduced": "9.0.0-milestone10" }, { "last_affected": "9.0.0-milestone10" }, { "introduced": "9.0.0-milestone11" }, { "last_affected": "9.0.0-milestone11" }, { "introduced": "9.0.0-milestone12" }, { "last_affected": "9.0.0-milestone12" }, { "introduced": "9.0.0-milestone13" }, { "last_affected": "9.0.0-milestone13" }, { "introduced": "9.0.0-milestone14" }, { "last_affected": "9.0.0-milestone14" }, { "introduced": "9.0.0-milestone15" }, { "last_affected": "9.0.0-milestone15" }, { "introduced": "9.0.0-milestone16" }, { "last_affected": "9.0.0-milestone16" }, { "introduced": "9.0.0-milestone17" }, { "last_affected": "9.0.0-milestone17" }, { "introduced": "9.0.0-milestone18" }, { "last_affected": "9.0.0-milestone18" }, { "introduced": "9.0.0-milestone19" }, { "last_affected": "9.0.0-milestone19" }, { "introduced": "9.0.0-milestone2" }, { "last_affected": "9.0.0-milestone2" }, { "introduced": "9.0.0-milestone20" }, { "last_affected": "9.0.0-milestone20" }, { "introduced": "9.0.0-milestone21" }, { "last_affected": "9.0.0-milestone21" }, { "introduced": "9.0.0-milestone22" }, { "last_affected": "9.0.0-milestone22" }, { "introduced": "9.0.0-milestone23" }, { "last_affected": "9.0.0-milestone23" }, { "introduced": "9.0.0-milestone24" }, { "last_affected": "9.0.0-milestone24" }, { "introduced": "9.0.0-milestone25" }, { "last_affected": "9.0.0-milestone25" }, { "introduced": "9.0.0-milestone26" }, { "last_affected": "9.0.0-milestone26" }, { "introduced": "9.0.0-milestone27" }, { "last_affected": "9.0.0-milestone27" }, { "introduced": "9.0.0-milestone3" }, { "last_affected": "9.0.0-milestone3" }, { "introduced": "9.0.0-milestone4" }, { "last_affected": "9.0.0-milestone4" }, { "introduced": "9.0.0-milestone5" }, { "last_affected": "9.0.0-milestone5" }, { "introduced": "9.0.0-milestone6" }, { "last_affected": "9.0.0-milestone6" }, { "introduced": "9.0.0-milestone7" }, { "last_affected": "9.0.0-milestone7" }, { "introduced": "9.0.0-milestone8" }, { "last_affected": "9.0.0-milestone8" }, { "introduced": "9.0.0-milestone9" }, { "last_affected": "9.0.0-milestone9" } ] }
Affected versions
9.*
9.0.0-milestone1
9.0.0-milestone10
9.0.0-milestone11
9.0.0-milestone12
9.0.0-milestone13
9.0.0-milestone14
9.0.0-milestone15
9.0.0-milestone16
9.0.0-milestone17
9.0.0-milestone18
9.0.0-milestone19
9.0.0-milestone2
9.0.0-milestone20
9.0.0-milestone21
9.0.0-milestone22
9.0.0-milestone23
9.0.0-milestone24
9.0.0-milestone25
9.0.0-milestone26
9.0.0-milestone27
9.0.0-milestone3
9.0.0-milestone4
9.0.0-milestone5
9.0.0-milestone6
9.0.0-milestone7
9.0.0-milestone8
9.0.0-milestone9