CVE-2011-2513

CVE-2011-2513 describes an information disclosure vulnerability in the Java Network Launching Protocol (JNLP) implementation of IcedTea6 and IcedTea-Web. Remote attackers can exploit this flaw to obtain sensitive user information, specifically the username and full paths of home and cache directories, by accessing ClassLoader properties. The vulnerability has a CVSS score of 5.0, indicating a medium severity. It is easily exploitable over the network with low attack complexity and requires no authentication, leading to a potential impact of partial confidentiality loss. There is no evidence of active exploitation, nor is public exploit code available in Metasploit, Nuclei, or ExploitDB. The CVE has received minimal community discussion and media coverage, suggesting low public awareness and a lack of widespread exploitation.