Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
IcedTea 1.7.x before 1.7.6, 1.8.x before 1.8.3, and 1.9.x before 1.9.2, as based on OpenJDK 6, declares multiple sensitive variables as public, which allows remote attackers to obtain sensitive information including (1) user.name, (2) user.home, and (3) java.home system properties, and other sensitive information such as installation directories.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Red Hat IcedTea信息泄露漏洞
Vulnerability Description
IcedTea用开源实现去替换OpenJDK中那些非开源部分，并为当前缺乏平台移植性OpenJDK提供可移植性，为java社区提供一个完整的开源工具链及代码库。 基于OpenJDK 6的IcedTea 1.7.6之前的1.7.x版本，1.8.3之前的1.8.x版本，以及1.9.2之前的1.9.x版本声明多个敏感变量为公共变量。远程攻击者可利用该漏洞获取包含user.name，user.home，以及java.home系统属性的敏感信息，以及其他诸如安装目录下的敏感信息。
CVSS Information
N/A
Vulnerability Type
N/A