Disclosure summary
The default Java security properties configuration did not restrict access to the com.sun.org.glassfish.external and com.sun.org.glassfish.gmbal packages. An untrusted Java application or applet could use these flaws to bypass Java sandbox restrictions.
CISA remediation guidance
Apply updates per vendor instructions.
Original records & references
PUBLISHED 2022-03-28T00:00:00-04:00
MODIFIED 2022-03-28T00:00:00-04:00
INGESTED 2026-10-06T11:42:58-04:00