CCE-94579-0Platform: cpe:/a:oracle:jre:1.7.0 | Date: (C)2021-06-15 (M)2023-07-04 |
This configuration file must hold values of the location of the deployment.properties file as well as the enforcement of these properties. Without a proper path for the properties file, deployment would not be possible. If the path specified does not lead to a properties file the value of the 'deployment.system.config. mandatory' key determines how to handle the situation. If the value of this key is true, JRE will not run if the path to the properties file is invalid. NOTE: The 'JRE' directory in the file path may reflect the specific JRE release installed.
Parameter:
[no/yes]
Technical Mechanism:
Specify the path to the deployment.properties file and set the mandatory configuration values.
Navigate to the deployment.config file.
/usr/java/jre/lib/deployment.properties
Include the following keys in the configuration file:
'deployment.system.config=file:/usr/java/jre/lib/deployment.properties'
'deployment.system.config.mandatory=false'.
CCSS Severity: | CCSS Metrics: |
CCSS Score : 7.8 | Attack Vector: LOCAL |
Exploit Score: 1.8 | Attack Complexity: LOW |
Impact Score: 5.9 | Privileges Required: LOW |
Severity: HIGH | User Interaction: NONE |
Vector: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H | Scope: UNCHANGED |
| Confidentiality: HIGH |
| Integrity: HIGH |
| Availability: HIGH |
| |
References: Resource Id | Reference |
---|
SCAP Repo OVAL Definition | oval:org.secpod.oval:def:60331 |