CVE-2011-2513

The Java Network Launching Protocol (JNLP) implementation in IcedTea6 1.9.x before 1.9.9 and before 1.8.9, and IcedTea-Web 1.1.x before 1.1.1 and before 1.0.4…

published May 14, 2014

CVSS
—
EPSS
2%
Percentile
84.5
In the wild
Unconfirmed
What it is

The Java Network Launching Protocol (JNLP) implementation in IcedTea6 1.9.x before 1.9.9 and before 1.8.9, and IcedTea-Web 1.1.x before 1.1.1 and before 1.0.4, allows remote attackers to obtain the username and full path of the home and cache directories by accessing properties of the ClassLoader.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02497 · 84.5th percentile
Published
2014-05-14T00:00Z
EPSS history
Timeline
  • 14 MAY 00:00Z
    The Java Network Launching Protocol (JNLP) implementation in IcedTea6 1.9.x before 1.9.9 and before 1.8.9, and IcedTea-Web 1.1.x before 1.1.1 and before 1.0.4…
    cvelistv5