CWE Code: 264
Vulnerability Type: privilege_escalation
CVSS Score: 10.0
CWE Name:  Permissions Privileges and Access Controls
Summary: the java management extensions (jmx) implementation in sun java se 6 before update 15, and openjdk, does not properly enforce opentype checks, which allows context-dependent attackers to bypass intended access restrictions by leveraging finalizer resurrection to obtain a reference to a privileged object.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2009-08-10
Last Modified Date: 2017-09-19