CVE-2009-2690

CVE-2009-2690 · MEDIUM Severity

AV:N/AC:L/AU:N/C:P/I:N/A:N

The encoder in Sun Java SE 6 before Update 15, and OpenJDK, grants read access to private variables with unspecified names, which allows context-dependent attackers to obtain sensitive information via an untrusted (1) applet or (2) application.

Learn more about our Web Application Penetration Testing UK.