Google App Engine Java Security Sandbox Multiple Security Vulnerabilities

Bugtraq ID:	71522
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Dec 06 2014 12:00AM
Updated:	Dec 06 2014 12:00AM
Credit:	Security Explorations
Vulnerable:	Google Google App Engine 0
Not Vulnerable:

Google App Engine Java Security Sandbox Multiple Security Vulnerabilities

Google App Engine is prone to multiple security vulnerabilities.

An attacker may exploit these issues to obtain sensitive information, execute arbitrary code or bypass certain security restrictions and perform unauthorized actions. This may aid in further attacks.

Google App Engine Java Security Sandbox Multiple Security Vulnerabilities

Currently, we are not aware of any working exploits. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

Google App Engine Java Security Sandbox Multiple Security Vulnerabilities

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

Google App Engine Java Security Sandbox Multiple Security Vulnerabilities

References:

• Google App Engine Homepage (Google)
  
• [SE-2014-02] Google App Engine Java security sandbox bypasses (Security Explorations )