CVE-2021-28167CWE-909

In Eclipse Openj9 to version 0.25.0, usage of the jdk.internal.reflect.ConstantPool API causes the JVM in some cases to pre-resolve certain constant pool…

published April 21, 2021

CVSS
—
EPSS
1%
Percentile
66.0
In the wild
Unconfirmed
What it is

In Eclipse Openj9 to version 0.25.0, usage of the jdk.internal.reflect.ConstantPool API causes the JVM in some cases to pre-resolve certain constant pool entries. This allows a user to call static methods or access static members without running the class initialization method, and may allow a user to observe uninitialized values.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01126 · 66.0th percentile
Weakness
CWE-909 · Missing Initialization of Resource
Published
2021-04-21T17:30Z
EPSS history
Timeline
  • 21 APR 17:30Z
    In Eclipse Openj9 to version 0.25.0, usage of the jdk.internal.reflect.ConstantPool API causes the JVM in some cases to pre-resolve certain constant pool…
    cvelistv5