CVE:CVE-2018-2783
CNNVD:CNNVD-201804-1238
Oracle Java SE等都是美国甲骨文（Oracle）公司的产品。Oracle Java SE是一款用于开发和部署桌面、服务器以及嵌入设备和实时环境中的Java应用程序。Oracle Java SE Embedded是一款针对嵌入式系统的、可移植的应用程序的Java平台。Oracle Jrockit是一款内置于Oracle融合中间件中的Java虚拟机。
Oracle Java SE、Java SE Embedded和Jrockit中的Security子组件存在访问控制错误漏洞。该漏洞源于网络系统或产品未正确限制来自未授权角色的资源访问。以下产品和版本受到影响：Oracle Java SE 6u181版本，7u161版本，8u152版本；Java SE Embedded 8u152版本；JRockit R28.3.17版本。
solution:Upgrade oracle jdk to a higher version than 1.6.0:update181,1.7.0:update161,1.8.0:update152,and avoid the version 1.6.0:update181,1.7.0:update161,1.8.0:update152; Upgrade oracle jre to a higher version than 1.6.0:update181,1.7.0:update161,1.8.0:update152,and avoid the version 1.6.0:update181,1.7.0:update161,1.8.0:update152; Upgrade oracle jrockit to a higher version than r28.3.17,and avoid the version r28.3.17; Upgrade redhat satellite to a higher version than 5.6,5.7,5.8,and avoid the version 5.6,5.7,5.8; Upgrade redhat enterprise_linux_desktop to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade redhat enterprise_linux_server to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade redhat enterprise_linux_workstation to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade canonical ubuntu_linux to a higher version than 16.04,17.10,and avoid the version 16.04,17.10; Upgrade hp xp7_command_view to a higher version than *