| VID |
50342 |
| Severity |
10 |
| Port |
139,445 |
| Protocol |
TCP |
| Class |
SMB |
| Detailed Description |
Zulu Java jre installed on the remote Windows host.
From January 2019, all JDKs provided by Oracle will be paid for, and access to the JDK itself is prohibited unless you purchase a subscription. The existing general/extended support service is included in the subscription, so it is not provided as a separate service. Individual users will have to pay from January 2021. Because of this, many companies are withdrawing from the Oracle JDK, and other third-party JDKs based on OpenJDK are emerging as an alternative. A typical example is Zulu JDK developed by Azul Systems. Zulu JDK is an implementation certified by Oracle's Technology Certification Kit (TCK). It can be used for free by both individuals and businesses, and paid services are provided only for technical support.
* Note: This check requires an account with administrative privileges which can log into the host to scan. Absence of these conditions will result in the check not being performed and a False Negative for all vulnerable hosts.
* References:
https://www.azul.com/downloads
* Platforms Affected:
Microsoft Windows Any version
Linux Any version |
| Recommendation |
Check the following site for updates periodically.
https://www.azul.com/downloads/ |
| Related URL |
(CVE) |
| Related URL |
(SecurityFocus) |
| Related URL |
(ISS) |
|
