The encoder in Sun Java SE 6 before Update 15, and OpenJDK, grants read access to private variables with unspecified names, which allows context-dependent attackers to obtain sensitive information via an untrusted (1) applet or (2) application.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Openjdk | Sun | * | * |
Java_se | Sun | * | 6 |