CVE-2018-2629

CVE-2018-2629 is a vulnerability within the Java SE, Java SE Embedded, and JRockit components, specifically in the JGSS subcomponent, affecting various versions of Oracle Java SE, Java SE Embedded, and JRockit. This vulnerability, with a CVSS 3.0 Base Score of 5.3 (Medium), allows an unauthenticated attacker with network access to achieve unauthorized creation, deletion, or modification of critical data. Exploitation is difficult, requiring human interaction from a non-attacker, and can occur via multiple protocols, including through sandboxed Java Web Start applications, applets, or by supplying data to APIs. The attack vector is network-based, but its high attack complexity and user interaction requirement contribute to its medium severity. While there is no confidentiality impact, successful exploitation can lead to a high integrity impact on all accessible Java data. Currently, there is no known active exploitation, nor is exploit code available in Metasploit, Nuclei, or ExploitDB. The vulnerability has also received minimal community discussion and media coverage, indicating a low level of public attention.