vulnerability
Huawei EulerOS: CVE-2017-10356: java-1.7.0-openjdk security update
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 2 | (AV:L/AC:L/Au:N/C:P/I:N/A:N) | Oct 19, 2017 | Nov 30, 2017 | Apr 25, 2025 |
Severity
2
CVSS
(AV:L/AC:L/Au:N/C:P/I:N/A:N)
Published
Oct 19, 2017
Added
Nov 30, 2017
Modified
Apr 25, 2025
Description
It was discovered that the Security component of OpenJDK generated weak password-based encryption keys used to protect private keys stored in key stores. This made it easier to perform password guessing attacks to decrypt stored keys if an attacker could gain access to a key store.
Solutions
huawei-euleros-2_0_sp1-upgrade-java-1.7.0-openjdkhuawei-euleros-2_0_sp1-upgrade-java-1.7.0-openjdk-develhuawei-euleros-2_0_sp1-upgrade-java-1.7.0-openjdk-headless
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.