Classification

Overview

The application uses JDBC (Java Database Connectivity) methods. Applets that use JDBC in an untrusted environment can compromise the database.

According to the default settings, Java applet can open a connection to a database located on the server from which it was downloaded. This is acceptable only in a trusted environment. Otherwise, an attacker can use the applet to get access parameters and ultimately to gain direct access to the database.

References

1. CWE-305: Authentication Bypass by Primary Weakness
2. OWASP Top 10 2017-A6-Security Misconfiguration