Vulnerability Description
The agent in Thermostat before 1.0.6, when using unspecified configurations, allows local users to obtain the JMX management URLs of all local Java virtual machines and gain privileges via unknown vectors.
CVSS Score
4.4
MEDIUM
AV:L/AC:M/Au:N/C:P/I:P/A:P
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Thermostat Project | Thermostat | <= 1.0.4 |
References
- http://icedtea.classpath.org/pipermail/thermostat-announce/2014-December/000013.Patch
- http://rhn.redhat.com/errata/RHSA-2014-2000.html
- http://icedtea.classpath.org/pipermail/thermostat-announce/2014-December/000013.Patch
- http://rhn.redhat.com/errata/RHSA-2014-2000.html
FAQ
What is CVE-2014-8120?
CVE-2014-8120 is a vulnerability with a CVSS score of 4.4 (MEDIUM). The agent in Thermostat before 1.0.6, when using unspecified configurations, allows local users to obtain the JMX management URLs of all local Java virtual machines and gain privileges via unknown vec...
How severe is CVE-2014-8120?
CVE-2014-8120 has been rated MEDIUM with a CVSS base score of 4.4/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2014-8120?
Check the references section above for vendor advisories and patch information. Affected products include: Thermostat Project Thermostat.