Be alert! Vulnerability in the Java SE, Java SE Embedded and JRockit component of Oracle Java SE (subcomponent: Serialization). 

The security concerns on CVE-2018-2815, please staying alert. For more details, please see below:

  1. The Java Security Architecture (JSA) defines ways for unprivileged code to perform privileged operations using

AccessController.doPrivileged().

2. The method includes create a new PrivilegedIntrospectHelper.

3. The new PrivilegedIntrospectHelper will be executed on a privileged block. This block will all internalIntrospecthelper(bean,prop,value,request,param,ignoreMethodNF) which will allow to invoke encapsulation (setter).

4. Result:

With encapsulation we pretend that nothing is revealed about the internal representation of an object, and we interact with our components only through their public interfaces; a desirable attribute that we usually exploit later when we want to change the internal representation of data in a component without breaking any code from its users.

Official security update show as below url:

http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html

 

 

3 thoughts on “Be alert! Vulnerability in the Java SE, Java SE Embedded and JRockit component of Oracle Java SE (subcomponent: Serialization). ”

  1. Hello! I know this is kinda off topic however I’d figured I’d ask.
    Would you be interested in exchanging links or maybe guest authoring a blog post or vice-versa?
    My blog covers a lot of the same subjects as yours and I think we could greatly benfit
    from each other. If you are interested feel free to shoot me an e-mail.

    I look forward to hearing from you! Awesome blog by
    the way!

  2. Today, SEO is a term which means Search Engine Optimization. SEO is done by SEO
    techniques utilized in SEO services. Search Engine Optimization services is like compelling a site
    to grow-up in major search engines like Google, Yahoo!
    and MSN. Now-a-days its very important to reach a good ranking to have a respectable online enterprise.

  3. Howdy! Quick question that’s totally off topic. Do you know how to
    make your site mobile friendly? My weblog looks weird when browsing from my iphone.
    I’m trying to find a template or plugin that might be able to
    resolve this issue. If you have any suggestions, please share.
    Thank you!

Comments are closed.