Description
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Libraries. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to GnomeFileTypeDetector and a missing check for read permissions for a path.
Remediation
References
Related Vulnerabilities
WordPress Plugin Dynamic Widgets Multiple Unspecified Vulnerabilities (1.5.7)
WordPress 5.4.x Multiple Vulnerabilities (5.4 - 5.4.13)
Magento Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2019-7872)
WordPress Plugin WP Maintenance Mode & Site Under Construction Security Bypass (1.8.1)