Security Advisory

CVE-2015-5235

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2015-10-09 14:00:00

Last updated 2024-08-06 06:41:08

Assigner redhat

CVSS score not scored

State PUBLISHED

Description

IcedTea-Web before 1.5.3 and 1.6.x before 1.6.1 does not properly determine the origin of unsigned applets, which allows remote attackers to bypass the approval process or trick users into approving applet execution via a crafted web page.

← Browse all CVEs View on cve.org ↗