Arbitrary Host Connection Vulnerability in MacOS Runtime Java (MRJ) and Microsoft Virtual Machine (VM) for MacOS

Arbitrary Host Connection Vulnerability in MacOS Runtime Java (MRJ) and Microsoft Virtual Machine (VM) for MacOS

CVE-2000-0563 · HIGH Severity

AV:N/AC:L/AU:N/C:C/I:C/A:C

The URLConnection function in MacOS Runtime Java (MRJ) 2.1 and earlier and the Microsoft virtual machine (VM) for MacOS allows a malicious web site operator to connect to arbitrary hosts using a HTTP redirection, in violation of the Java security model.

Learn more about our Cis Benchmark Audit For Apple Macos.