CVE:CVE-2019-2449
CNNVD:CNNVD-201901-572
Oracle Java SE是美国甲骨文（Oracle）公司的一款用于开发和部署桌面、服务器以及嵌入设备和实时环境中的Java应用程序。
Oracle Java SE 8u192版本中的Deployment子组件中存在访问控制错误漏洞。该漏洞源于网络系统或产品未正确限制来自未授权角色的资源访问。
solution:Upgrade oracle jdk to a higher version than 1.8.0:update192,and avoid the version 1.8.0:update192; Upgrade oracle jre to a higher version than 1.8.0:update192,and avoid the version 1.8.0:update192; Upgrade redhat satellite to a higher version than 5.8,and avoid the version 5.8; Upgrade redhat enterprise_linux to a higher version than 8.0,and avoid the version 8.0; Upgrade redhat enterprise_linux_desktop to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade redhat enterprise_linux_eus to a higher version than 8.6,and avoid the version 8.6; Upgrade redhat enterprise_linux_server to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade redhat enterprise_linux_workstation to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade netapp oncommand_unified_manager to a higher version than *,and avoid the version [7.3,),[9.4,),no fixed version after 7.3,no fixed version after 9.4; Upgrade netapp oncommand_workflow_automation to a higher version than -; Upgrade netapp snapmanager to a higher version than -