An attacker can arbitrarily specify one or more names of system properties and can then retrieve their respective values.
An attacker can arbitrarily specify one or more names of classes to be loaded. For each specified class, the attacker will receive an instance of java.lang.Class for the respective type.
An attacker can arbitrarily specify one or more names of classes to be loaded. For each specified class, the attacker will receive an instance of java.lang.Class for the respective type. This only works if the attacker has a way to perform the call on behalf of a privileged class.
An attacker can load an arbitrary restricted class by providing its name.
The attacker provides a target object to call an arbitrary public method with arbitrary arguments.
The attacker provides an instance of java.lang.Class for the type that declares the public method, the method name, and its parameter types. In return, the attacker will receive an instance of java.lang.reflect.Method for the specified method.
An attacker uses MethodHandles.publicLookup() or MethodHandles.lookup() to retrieve a lookup object without using a confused deputy. This object can be used to lookup accessible MethodHandles.
Using this primitive requires class file manipulation. The manipulated class file can be used to obtain an instance of MethodHandle to a protected method.
An attacker can provide an instance of MethodHandle and then invoke the method in such a way, that the called method's immediate caller is a system class (confused deputy). This can be benificial, if the called method is caller-sensitive and makes security-related decisions dependent on the immediate caller.
An attacker provides an instance of java.lang.Class for an arbitrary type whose methods shall be accessed. In return, the attacker will receive an array of java.lang.reflect.Method with all declared methods of the specified type, including public, protected, default, and private methods, but excluding inherited methods. This only works if the attacker has a way to perform the call on behalf of a privileged class.
An attacker provides a class, a method name, and the method's parameter types in order to get an instance of java.lang.reflect.Method for the specified member.
An attacker provides an instance of java.lang.Class for an arbitrary type whose declared field shall be accessed, as well as the field's name. In return, the attacker will receive an instance of java.lang.reflect.Field for the specified field. Access is possible to public, protected, default, or private fields, but not to inherited fields. This only works if the attacker has a way to perform the call on behalf of a privileged class.
An attacker provides an instance of java.lang.Class for an arbitrary type whose declared field shall be accessed, as well as the field's name. In return, the attacker will receive an instance of java.lang.reflect.Field for the specified field that was also set to be accessible.
An attacker provides a serializable class whose declared, non-static fields shall be accessed. In return, the attacker receives an array of Field that contains all declared, non-static fields of the specified type. Each field has been set accessible.
The attacker provides an object that contains a field that is to be read or written, as well as the index of that target field. The index is determined by the order of declaration and does not consider static fields. If a value is to be written, the attacker also has to provide the new value.
An attacker provides an instance of java.lang.Class for an arbitrary type whose declared method shall be accessed, as well as the method's name and parameter types. In return, the attacker will receive an instance of java.lang.reflect.Method for the specified method that was also set to be accessible.
An attacker provides a class, and the constructors's parameter types in order to get an instance of java.lang.reflect.Constructor for the specified type.
An attacker provides an instance of java.lang.Class for an arbitrary type whose constructor shall be accessed, as well as an array of its parameter types. In return, the attacker will receive an instance of java.lang.reflect.Constructor for the specified constructor. This only works if the attacker has a way to perform the call on behalf of a privileged class.
The attacker provides a representation of a class (e.g., a byte array) that is supposed to be defined in a privileged context. Using this primitive will then define the class and return an instance of java.lang.Class.
The attacker needs a way to get access to a set of restricted classes, that provide functionality for defining classes in a privileged context. Then, the attacker needs to find a way to get access to that functionality. Finally, the attacker calls this functionality by providing a byte-array that represents the type to be defined.
The attacker needs a way to get access to the set of restricted classes and a way to call those methods, that will set a specified field accessible.
The attacker needs a way to get access to the set of restricted classes and a way to call the required methods. The attacker then provides an instance of java.lang.Class for the target type and receives an array of java.lang.reflect.Field for all declared fields of the specified type. The target type must not be a restricted class.
The attacker can use this primitive to set arbitrary class members accessible. An instance of java.lang.reflect.AccessibleObject is required.
The attacker can modify field values through memory manipulation. For this, the attacker may require information about field locations in memory. The memory locations that can be modified may be restricted and are determined by the implementation.
The attacker provides an instance of java.lang.reflect.Method that represents an arbitrary static method. Using this primitive calls this Method from a system class and delivers the return value.
There are various ways on how to use the MethodHandles API, parts of it are caller-sensitive. An attacker can use a confused deputy to retrieve a lookup object (using MethodHandles.lookup()), which can be used to access members that are accessible to the confused deputy, but should be inaccessible to untrusted code. There are also other caller-sensitive methods in the MethodHandles API that can be used by an attacker.
An attacker provides an instance of java.lang.reflect.Method that is supposed to be called within a doPrivileged-block of a system class. The method can be called with arbitrary arguments and the return value is available to the attacker.
An attacker provides an instance of java.lang.reflect.Method for the instance method that is supposed to be called within a doPrivileged-block of a system class, as well as the object that contains the method. The call can be performed with arbitrary arguments and the return value is available to the attacker.
The attacker provides a class name, method name, arguments, and an object upon which to perform the call. Using this primitive will then call the specified method with the specified arguments through a system class and return the return value to the attacker.
Using this primitive will allow an attacker to use a system class to call a specified method and retrieve the return value. This only works for a subset of methods, which is determined by the implementation.
The attacker provides a class name for the type that is supposed to be instantiated, as well as all arguments to the constructor, that shall be used for instantiation. In return, the attacker will receive an instance of java.lang.Object for the type.
The attacker provides a class name for the type that is supposed to be instantiated, as well as the required arguments to the constructor. In return, the attacker will receive an instance of java.lang.Object for the type. This only works for a subset of restricted classes, which is determined by the implementations.
The attacker is able to create a huge file on the filesystem of the system.
The attacker initiates a new thread, e.g., using GUI functionality, that only contains trusted classes. The attacker is able to influence the control flow of the thread by setting certain variables to specific values, e.g., setting scripts that will be evaluated dynamically by a trusted class. In effect, the thread will perform a specific method call that is profitable to the attacker.
The attacker is able to access a private inner class by using MethodHandles. He can receive a MethodHandle to the constructor of such class.
The attacker uses a private PrivilegedAction to get access to specified methods of specified classes.
An attacker provides an infnite loop creating an object array (Object[]) and initializes it with a static Object. Afterwards he assigns the object array to the Object. After a few seconds the JVM crashes.
Vector 1 (1):
CVE-2003-1301 Vector 2 (1):
CVE-2006-2426 Vector 3 (7):
CVE-2008-5353, CVE-2010-0094, CVE-2012-0507, NO-CVE-15-ibm, NO-CVE-21-ibm, NO-CVE-28-ibm, NO-CVE-29-ibm Vector 4 (3):
CVE-2010-0840, CVE-2011-3544, CVE-2013-1488 Vector 5 (1):
CVE-2012-1726 Vector 6 (2):
CVE-2012-5072a, CVE-2012-5072b Vector 7 (1):
CVE-2012-5088a Vector 8 (1):
CVE-2012-5088b Vector 9 (1):
CVE-2013-0422 Vector 10 (1):
CVE-2013-0431 Vector 11 (4):
CVE-2013-2423, CVE-2013-2465, CVE-2013-1475, NO-CVE-3 Vector 12 (2):
CVE-2013-2436, NO-CVE-22-ibm Vector 13 (1):
CVE-2013-2460 Vector 14 (3):
NO-CVE-6-ibm, NO-CVE-25-ibm, NO-CVE-7-ibm Vector 15 (4):
NO-CVE-8-ibm, NO-CVE-10-ibm, NO-CVE-19-ibm, NO-CVE-9-ibm Vector 16 (1):
NO-CVE-11-ibm Vector 17 (1):
CVE-2012-5076 Vector 18 (7):
CVE-2012-5076a1, CVE-2012-5076b, CVE-2012-5076c, CVE-2012-5076d, CVE-2012-5076e, CVE-2012-5076f, CVE-2012-5076g Vector 19 (2):
CVE-2012-5076a2, MULTI-CVE-2012-5076-2012-5088 Vector 20 (1):
MULTI-CVE-2012-0547-2012-1726 Vector 21 (1):
MULTI-CVE-2012-1682-2012-5076 Vector 22 (1):
MULTI-CVE-2012-4681-2012-5074 Vector 23 (1):
CVE-2012-4681 Vector 24 (1):
CVE-2013-1489 Vector 25 (1):
MULTI-CVE-2012-1682-2012-1726 Vector 26 (1):
MULTI-CVE-2012-5075-2012-4681 Vector 27 (1):
MULTI-CVE-2012-5075-2012-5071 Vector 28 (3):
NO-CVE-12-ibm, NO-CVE-13-ibm, NO-CVE-14-ibm Vector 29 (2):
NO-CVE-18-ibm, NO-CVE-20-ibm Vector 30 (1):
NO-CVE-24-ibm Vector 31 (1):
NO-CVE-26-ibm Vector 32 (1):
NO-CVE-27 Vector 33 (1):
NO-CVE-30-ibm
Vector subsets:
if ('getdeclaredfieldaccess',) is contained in vector,
then also
('restricteddefinepriv',)
92.31%(12/13)
if ('getdeclaredmethodaccess',) is contained in vector,
then also
('getdeclaredfieldaccess',)
100.00%(3/3)
if ('getdeclaredmethodaccess',) is contained in vector,
then also
('restricteddefinepriv',)
100.00%(3/3)
if ('restricteddefinepriv',) is contained in vector,
then also
('getdeclaredfieldaccess',)
54.55%(12/22)
if ('callanymethodhandlefromsystemclass',) is contained in vector,
then also
('loadarbitraryclassescallerpriv',)
100.00%(4/4)
if ('callanymethodhandlefromsystemclass',) is contained in vector,
then also
('lookup',)
100.00%(4/4)
if ('callanymethodhandlefromsystemclass',) is contained in vector,
then also
('restricteddefinepriv',)
100.00%(4/4)
if ('loadarbitraryclassescallerpriv',) is contained in vector,
then also
('restricteddefinepriv',)
70.00%(14/20)
if ('lookup',) is contained in vector,
then also
('loadarbitraryclassescallerpriv',)
62.50%(5/8)
if ('lookup',) is contained in vector,
then also
('restricteddefinepriv',)
87.50%(7/8)
if ('restricteddefinepriv',) is contained in vector,
then also
('loadarbitraryclassescallerpriv',)
63.64%(14/22)
if ('getdeclaredmethodpriv',) is contained in vector,
then also
('restricteddefinepriv',)
100.00%(3/3)
if ('callstaticfromsystemclass',) is contained in vector,
then also
('loadarbitraryclassescallerpriv',)
100.00%(10/10)
if ('callstaticfromsystemclass',) is contained in vector,
then also
('lookupcd',)
100.00%(10/10)
if ('callstaticfromsystemclass',) is contained in vector,
then also
('restricteddefinepriv',)
100.00%(10/10)
if ('loadarbitraryclassescallerpriv',) is contained in vector,
then also
('lookupcd',)
60.00%(12/20)
if ('lookupcd',) is contained in vector,
then also
('callstaticfromsystemclass',)
83.33%(10/12)
if ('lookupcd',) is contained in vector,
then also
('loadarbitraryclassescallerpriv',)
100.00%(12/12)
if ('lookupcd',) is contained in vector,
then also
('restricteddefinepriv',)
83.33%(10/12)
if ('callsubsetfromsystemclass',) is contained in vector,
then also
('loadarbitraryclassescallerpriv',)
75.00%(6/8)
if ('callsubsetfromsystemclass',) is contained in vector,
then also
('getdeclaredfieldpriv',)
75.00%(6/8)
if ('callsubsetfromsystemclass',) is contained in vector,
then also
('restrictedsetaccessible',)
75.00%(6/8)
if ('getdeclaredconstructorpriv',) is contained in vector,
then also
('callsubsetfromsystemclass',)
100.00%(4/4)
if ('getdeclaredconstructorpriv',) is contained in vector,
then also
('loadarbitraryclassescallerpriv',)
100.00%(4/4)
if ('getdeclaredconstructorpriv',) is contained in vector,
then also
('getdeclaredfieldpriv',)
100.00%(4/4)
if ('getdeclaredconstructorpriv',) is contained in vector,
then also
('restrictedsetaccessible',)
100.00%(4/4)
if ('getdeclaredfieldpriv',) is contained in vector,
then also
('callsubsetfromsystemclass',)
100.00%(6/6)
if ('getdeclaredfieldpriv',) is contained in vector,
then also
('loadarbitraryclassescallerpriv',)
100.00%(6/6)
if ('getdeclaredfieldpriv',) is contained in vector,
then also
('getdeclaredconstructorpriv',)
66.67%(4/6)
if ('getdeclaredfieldpriv',) is contained in vector,
then also
('restrictedsetaccessible',)
100.00%(6/6)
if ('restrictedsetaccessible',) is contained in vector,
then also
('callsubsetfromsystemclass',)
66.67%(6/9)
if ('restrictedsetaccessible',) is contained in vector,
then also
('loadarbitraryclassescallerpriv',)
66.67%(6/9)
if ('restrictedsetaccessible',) is contained in vector,
then also
('getdeclaredfieldpriv',)
66.67%(6/9)
if ('callstaticfromsystemclass',) is contained in vector,
then also
('getdeclaredfieldaccess',)
70.00%(7/10)
if ('lookupcd',) is contained in vector,
then also
('getdeclaredfieldaccess',)
58.33%(7/12)
if ('getdeclaredfieldaccess',) is contained in vector,
then also
('callstaticfromsystemclass',)
53.85%(7/13)
if ('getdeclaredfieldaccess',) is contained in vector,
then also
('loadarbitraryclassescallerpriv',)
61.54%(8/13)
if ('getdeclaredfieldaccess',) is contained in vector,
then also
('lookupcd',)
53.85%(7/13)
if ('accesspublicmethod',) is contained in vector,
then also
('loadarbitraryclasses',)
75.00%(3/4)
if ('accesspublicmethod',) is contained in vector,
then also
('restrictedgetfields',)
75.00%(3/4)
if ('accesspublicmethod',) is contained in vector,
then also
('getpublicconstructor',)
75.00%(3/4)
if ('accesspublicmethod',) is contained in vector,
then also
('restrictedsetaccessible',)
75.00%(3/4)
if ('restrictedgetfields',) is contained in vector,
then also
('loadarbitraryclasses',)
100.00%(3/3)
if ('restrictedgetfields',) is contained in vector,
then also
('accesspublicmethod',)
100.00%(3/3)
if ('restrictedgetfields',) is contained in vector,
then also
('getpublicconstructor',)
100.00%(3/3)
if ('restrictedgetfields',) is contained in vector,
then also
('restrictedsetaccessible',)
100.00%(3/3)
if ('getpublicconstructor',) is contained in vector,
then also
('loadarbitraryclasses',)
100.00%(3/3)
if ('getpublicconstructor',) is contained in vector,
then also
('accesspublicmethod',)
100.00%(3/3)
if ('getpublicconstructor',) is contained in vector,
then also
('restrictedgetfields',)
100.00%(3/3)
if ('getpublicconstructor',) is contained in vector,
then also
('restrictedsetaccessible',)
100.00%(3/3)
if ('getdeclaredmethodaccess',) is contained in vector,
then also
('getdeclaredfieldaccess', 'restricteddefinepriv')
100.00%(3/3)
if ('callanymethodhandlefromsystemclass',) is contained in vector,
then also
('loadarbitraryclassescallerpriv', 'lookup')
100.00%(4/4)
if ('callanymethodhandlefromsystemclass',) is contained in vector,
then also
('loadarbitraryclassescallerpriv', 'restricteddefinepriv')
100.00%(4/4)
if ('callanymethodhandlefromsystemclass',) is contained in vector,
then also
('lookup', 'restricteddefinepriv')
100.00%(4/4)
if ('lookup',) is contained in vector,
then also
('loadarbitraryclassescallerpriv', 'restricteddefinepriv')
62.50%(5/8)
if ('callstaticfromsystemclass',) is contained in vector,
then also
('loadarbitraryclassescallerpriv', 'lookupcd')
100.00%(10/10)
if ('callstaticfromsystemclass',) is contained in vector,
then also
('loadarbitraryclassescallerpriv', 'restricteddefinepriv')
100.00%(10/10)
if ('callstaticfromsystemclass',) is contained in vector,
then also
('lookupcd', 'restricteddefinepriv')
100.00%(10/10)
if ('lookupcd',) is contained in vector,
then also
('callstaticfromsystemclass', 'loadarbitraryclassescallerpriv')
83.33%(10/12)
if ('lookupcd',) is contained in vector,
then also
('callstaticfromsystemclass', 'restricteddefinepriv')
83.33%(10/12)
if ('lookupcd',) is contained in vector,
then also
('loadarbitraryclassescallerpriv', 'restricteddefinepriv')
83.33%(10/12)
if ('callsubsetfromsystemclass',) is contained in vector,
then also
('loadarbitraryclassescallerpriv', 'getdeclaredfieldpriv')
75.00%(6/8)
if ('callsubsetfromsystemclass',) is contained in vector,
then also
('loadarbitraryclassescallerpriv', 'restrictedsetaccessible')
75.00%(6/8)
if ('callsubsetfromsystemclass',) is contained in vector,
then also
('getdeclaredfieldpriv', 'restrictedsetaccessible')
75.00%(6/8)
if ('getdeclaredconstructorpriv',) is contained in vector,
then also
('callsubsetfromsystemclass', 'loadarbitraryclassescallerpriv')
100.00%(4/4)
if ('getdeclaredconstructorpriv',) is contained in vector,
then also
('callsubsetfromsystemclass', 'getdeclaredfieldpriv')
100.00%(4/4)
if ('getdeclaredconstructorpriv',) is contained in vector,
then also
('callsubsetfromsystemclass', 'restrictedsetaccessible')
100.00%(4/4)
if ('getdeclaredconstructorpriv',) is contained in vector,
then also
('loadarbitraryclassescallerpriv', 'getdeclaredfieldpriv')
100.00%(4/4)
if ('getdeclaredconstructorpriv',) is contained in vector,
then also
('loadarbitraryclassescallerpriv', 'restrictedsetaccessible')
100.00%(4/4)
if ('getdeclaredconstructorpriv',) is contained in vector,
then also
('getdeclaredfieldpriv', 'restrictedsetaccessible')
100.00%(4/4)
if ('getdeclaredfieldpriv',) is contained in vector,
then also
('callsubsetfromsystemclass', 'loadarbitraryclassescallerpriv')
100.00%(6/6)
if ('getdeclaredfieldpriv',) is contained in vector,
then also
('callsubsetfromsystemclass', 'getdeclaredconstructorpriv')
66.67%(4/6)
if ('getdeclaredfieldpriv',) is contained in vector,
then also
('callsubsetfromsystemclass', 'restrictedsetaccessible')
100.00%(6/6)
if ('getdeclaredfieldpriv',) is contained in vector,
then also
('loadarbitraryclassescallerpriv', 'getdeclaredconstructorpriv')
66.67%(4/6)
if ('getdeclaredfieldpriv',) is contained in vector,
then also
('loadarbitraryclassescallerpriv', 'restrictedsetaccessible')
100.00%(6/6)
if ('getdeclaredfieldpriv',) is contained in vector,
then also
('getdeclaredconstructorpriv', 'restrictedsetaccessible')
66.67%(4/6)
if ('restrictedsetaccessible',) is contained in vector,
then also
('callsubsetfromsystemclass', 'loadarbitraryclassescallerpriv')
66.67%(6/9)
if ('restrictedsetaccessible',) is contained in vector,
then also
('callsubsetfromsystemclass', 'getdeclaredfieldpriv')
66.67%(6/9)
if ('restrictedsetaccessible',) is contained in vector,
then also
('loadarbitraryclassescallerpriv', 'getdeclaredfieldpriv')
66.67%(6/9)
if ('callstaticfromsystemclass',) is contained in vector,
then also
('loadarbitraryclassescallerpriv', 'getdeclaredfieldaccess')
70.00%(7/10)
if ('callstaticfromsystemclass',) is contained in vector,
then also
('lookupcd', 'getdeclaredfieldaccess')
70.00%(7/10)
if ('callstaticfromsystemclass',) is contained in vector,
then also
('getdeclaredfieldaccess', 'restricteddefinepriv')
70.00%(7/10)
if ('lookupcd',) is contained in vector,
then also
('callstaticfromsystemclass', 'getdeclaredfieldaccess')
58.33%(7/12)
if ('lookupcd',) is contained in vector,
then also
('loadarbitraryclassescallerpriv', 'getdeclaredfieldaccess')
58.33%(7/12)
if ('lookupcd',) is contained in vector,
then also
('getdeclaredfieldaccess', 'restricteddefinepriv')
58.33%(7/12)
if ('getdeclaredfieldaccess',) is contained in vector,
then also
('callstaticfromsystemclass', 'loadarbitraryclassescallerpriv')
53.85%(7/13)
if ('getdeclaredfieldaccess',) is contained in vector,
then also
('callstaticfromsystemclass', 'lookupcd')
53.85%(7/13)
if ('getdeclaredfieldaccess',) is contained in vector,
then also
('callstaticfromsystemclass', 'restricteddefinepriv')
53.85%(7/13)
if ('getdeclaredfieldaccess',) is contained in vector,
then also
('loadarbitraryclassescallerpriv', 'lookupcd')
53.85%(7/13)
if ('getdeclaredfieldaccess',) is contained in vector,
then also
('loadarbitraryclassescallerpriv', 'restricteddefinepriv')
61.54%(8/13)
if ('getdeclaredfieldaccess',) is contained in vector,
then also
('lookupcd', 'restricteddefinepriv')
53.85%(7/13)
if ('callanymethodhandlefromsystemclass',) is contained in vector,
then also
('lookup', 'loadarbitraryclassescallerpriv')
100.00%(4/4)
if ('lookupcd',) is contained in vector,
then also
('loadarbitraryclassescallerpriv', 'callstaticfromsystemclass')
83.33%(10/12)
if ('accesspublicmethod',) is contained in vector,
then also
('loadarbitraryclasses', 'restrictedgetfields')
75.00%(3/4)
if ('accesspublicmethod',) is contained in vector,
then also
('loadarbitraryclasses', 'getpublicconstructor')
75.00%(3/4)
if ('accesspublicmethod',) is contained in vector,
then also
('loadarbitraryclasses', 'restrictedsetaccessible')
75.00%(3/4)
if ('accesspublicmethod',) is contained in vector,
then also
('restrictedgetfields', 'getpublicconstructor')
75.00%(3/4)
if ('accesspublicmethod',) is contained in vector,
then also
('restrictedgetfields', 'restrictedsetaccessible')
75.00%(3/4)
if ('accesspublicmethod',) is contained in vector,
then also
('getpublicconstructor', 'restrictedsetaccessible')
75.00%(3/4)
if ('restrictedgetfields',) is contained in vector,
then also
('loadarbitraryclasses', 'accesspublicmethod')
100.00%(3/3)
if ('restrictedgetfields',) is contained in vector,
then also
('loadarbitraryclasses', 'getpublicconstructor')
100.00%(3/3)
if ('restrictedgetfields',) is contained in vector,
then also
('loadarbitraryclasses', 'restrictedsetaccessible')
100.00%(3/3)
if ('restrictedgetfields',) is contained in vector,
then also
('accesspublicmethod', 'getpublicconstructor')
100.00%(3/3)
if ('restrictedgetfields',) is contained in vector,
then also
('accesspublicmethod', 'restrictedsetaccessible')
100.00%(3/3)
if ('restrictedgetfields',) is contained in vector,
then also
('getpublicconstructor', 'restrictedsetaccessible')
100.00%(3/3)
if ('getpublicconstructor',) is contained in vector,
then also
('loadarbitraryclasses', 'accesspublicmethod')
100.00%(3/3)
if ('getpublicconstructor',) is contained in vector,
then also
('loadarbitraryclasses', 'restrictedgetfields')
100.00%(3/3)
if ('getpublicconstructor',) is contained in vector,
then also
('loadarbitraryclasses', 'restrictedsetaccessible')
100.00%(3/3)
if ('getpublicconstructor',) is contained in vector,
then also
('accesspublicmethod', 'restrictedgetfields')
100.00%(3/3)
if ('getpublicconstructor',) is contained in vector,
then also
('accesspublicmethod', 'restrictedsetaccessible')
100.00%(3/3)
if ('getpublicconstructor',) is contained in vector,
then also
('restrictedgetfields', 'restrictedsetaccessible')
100.00%(3/3)
if ('callanymethodhandlefromsystemclass',) is contained in vector,
then also
('loadarbitraryclassescallerpriv', 'lookup', 'restricteddefinepriv')
100.00%(4/4)
if ('callstaticfromsystemclass',) is contained in vector,
then also
('loadarbitraryclassescallerpriv', 'lookupcd', 'restricteddefinepriv')
100.00%(10/10)
if ('lookupcd',) is contained in vector,
then also
('callstaticfromsystemclass', 'loadarbitraryclassescallerpriv', 'restricteddefinepriv')
83.33%(10/12)
if ('callsubsetfromsystemclass',) is contained in vector,
then also
('loadarbitraryclassescallerpriv', 'getdeclaredfieldpriv', 'restrictedsetaccessible')
75.00%(6/8)
if ('getdeclaredconstructorpriv',) is contained in vector,
then also
('callsubsetfromsystemclass', 'loadarbitraryclassescallerpriv', 'getdeclaredfieldpriv')
100.00%(4/4)
if ('getdeclaredconstructorpriv',) is contained in vector,
then also
('callsubsetfromsystemclass', 'loadarbitraryclassescallerpriv', 'restrictedsetaccessible')
100.00%(4/4)
if ('getdeclaredconstructorpriv',) is contained in vector,
then also
('callsubsetfromsystemclass', 'getdeclaredfieldpriv', 'restrictedsetaccessible')
100.00%(4/4)
if ('getdeclaredconstructorpriv',) is contained in vector,
then also
('loadarbitraryclassescallerpriv', 'getdeclaredfieldpriv', 'restrictedsetaccessible')
100.00%(4/4)
if ('getdeclaredfieldpriv',) is contained in vector,
then also
('callsubsetfromsystemclass', 'loadarbitraryclassescallerpriv', 'getdeclaredconstructorpriv')
66.67%(4/6)
if ('getdeclaredfieldpriv',) is contained in vector,
then also
('callsubsetfromsystemclass', 'loadarbitraryclassescallerpriv', 'restrictedsetaccessible')
100.00%(6/6)
if ('getdeclaredfieldpriv',) is contained in vector,
then also
('callsubsetfromsystemclass', 'getdeclaredconstructorpriv', 'restrictedsetaccessible')
66.67%(4/6)
if ('getdeclaredfieldpriv',) is contained in vector,
then also
('loadarbitraryclassescallerpriv', 'getdeclaredconstructorpriv', 'restrictedsetaccessible')
66.67%(4/6)
if ('restrictedsetaccessible',) is contained in vector,
then also
('callsubsetfromsystemclass', 'loadarbitraryclassescallerpriv', 'getdeclaredfieldpriv')
66.67%(6/9)
if ('callstaticfromsystemclass',) is contained in vector,
then also
('loadarbitraryclassescallerpriv', 'lookupcd', 'getdeclaredfieldaccess')
70.00%(7/10)
if ('callstaticfromsystemclass',) is contained in vector,
then also
('loadarbitraryclassescallerpriv', 'getdeclaredfieldaccess', 'restricteddefinepriv')
70.00%(7/10)
if ('callstaticfromsystemclass',) is contained in vector,
then also
('lookupcd', 'getdeclaredfieldaccess', 'restricteddefinepriv')
70.00%(7/10)
if ('lookupcd',) is contained in vector,
then also
('callstaticfromsystemclass', 'loadarbitraryclassescallerpriv', 'getdeclaredfieldaccess')
58.33%(7/12)
if ('lookupcd',) is contained in vector,
then also
('callstaticfromsystemclass', 'getdeclaredfieldaccess', 'restricteddefinepriv')
58.33%(7/12)
if ('lookupcd',) is contained in vector,
then also
('loadarbitraryclassescallerpriv', 'getdeclaredfieldaccess', 'restricteddefinepriv')
58.33%(7/12)
if ('getdeclaredfieldaccess',) is contained in vector,
then also
('callstaticfromsystemclass', 'loadarbitraryclassescallerpriv', 'lookupcd')
53.85%(7/13)
if ('getdeclaredfieldaccess',) is contained in vector,
then also
('callstaticfromsystemclass', 'loadarbitraryclassescallerpriv', 'restricteddefinepriv')
53.85%(7/13)
if ('getdeclaredfieldaccess',) is contained in vector,
then also
('callstaticfromsystemclass', 'lookupcd', 'restricteddefinepriv')
53.85%(7/13)
if ('getdeclaredfieldaccess',) is contained in vector,
then also
('loadarbitraryclassescallerpriv', 'lookupcd', 'restricteddefinepriv')
53.85%(7/13)
if ('callanymethodhandlefromsystemclass',) is contained in vector,
then also
('lookup', 'loadarbitraryclassescallerpriv', 'restricteddefinepriv')
100.00%(4/4)
if ('lookupcd',) is contained in vector,
then also
('loadarbitraryclassescallerpriv', 'callstaticfromsystemclass', 'restricteddefinepriv')
83.33%(10/12)
if ('accesspublicmethod',) is contained in vector,
then also
('loadarbitraryclasses', 'restrictedgetfields', 'getpublicconstructor')
75.00%(3/4)
if ('accesspublicmethod',) is contained in vector,
then also
('loadarbitraryclasses', 'restrictedgetfields', 'restrictedsetaccessible')
75.00%(3/4)
if ('accesspublicmethod',) is contained in vector,
then also
('loadarbitraryclasses', 'getpublicconstructor', 'restrictedsetaccessible')
75.00%(3/4)
if ('accesspublicmethod',) is contained in vector,
then also
('restrictedgetfields', 'getpublicconstructor', 'restrictedsetaccessible')
75.00%(3/4)
if ('restrictedgetfields',) is contained in vector,
then also
('loadarbitraryclasses', 'accesspublicmethod', 'getpublicconstructor')
100.00%(3/3)
if ('restrictedgetfields',) is contained in vector,
then also
('loadarbitraryclasses', 'accesspublicmethod', 'restrictedsetaccessible')
100.00%(3/3)
if ('restrictedgetfields',) is contained in vector,
then also
('loadarbitraryclasses', 'getpublicconstructor', 'restrictedsetaccessible')
100.00%(3/3)
if ('restrictedgetfields',) is contained in vector,
then also
('accesspublicmethod', 'getpublicconstructor', 'restrictedsetaccessible')
100.00%(3/3)
if ('getpublicconstructor',) is contained in vector,
then also
('loadarbitraryclasses', 'accesspublicmethod', 'restrictedgetfields')
100.00%(3/3)
if ('getpublicconstructor',) is contained in vector,
then also
('loadarbitraryclasses', 'accesspublicmethod', 'restrictedsetaccessible')
100.00%(3/3)
if ('getpublicconstructor',) is contained in vector,
then also
('loadarbitraryclasses', 'restrictedgetfields', 'restrictedsetaccessible')
100.00%(3/3)
if ('getpublicconstructor',) is contained in vector,
then also
('accesspublicmethod', 'restrictedgetfields', 'restrictedsetaccessible')
100.00%(3/3)
if ('getdeclaredconstructorpriv',) is contained in vector,
then also
('callsubsetfromsystemclass', 'loadarbitraryclassescallerpriv', 'getdeclaredfieldpriv', 'restrictedsetaccessible')
100.00%(4/4)
if ('getdeclaredfieldpriv',) is contained in vector,
then also
('callsubsetfromsystemclass', 'loadarbitraryclassescallerpriv', 'getdeclaredconstructorpriv', 'restrictedsetaccessible')
66.67%(4/6)
if ('callstaticfromsystemclass',) is contained in vector,
then also
('loadarbitraryclassescallerpriv', 'lookupcd', 'getdeclaredfieldaccess', 'restricteddefinepriv')
70.00%(7/10)
if ('lookupcd',) is contained in vector,
then also
('callstaticfromsystemclass', 'loadarbitraryclassescallerpriv', 'getdeclaredfieldaccess', 'restricteddefinepriv')
58.33%(7/12)
if ('getdeclaredfieldaccess',) is contained in vector,
then also
('callstaticfromsystemclass', 'loadarbitraryclassescallerpriv', 'lookupcd', 'restricteddefinepriv')
53.85%(7/13)
if ('accesspublicmethod',) is contained in vector,
then also
('loadarbitraryclasses', 'restrictedgetfields', 'getpublicconstructor', 'restrictedsetaccessible')
75.00%(3/4)
if ('restrictedgetfields',) is contained in vector,
then also
('loadarbitraryclasses', 'accesspublicmethod', 'getpublicconstructor', 'restrictedsetaccessible')
100.00%(3/3)
if ('getpublicconstructor',) is contained in vector,
then also
('loadarbitraryclasses', 'accesspublicmethod', 'restrictedgetfields', 'restrictedsetaccessible')
100.00%(3/3)
if ('getdeclaredfieldaccess', 'getdeclaredmethodaccess') is contained in vector,
then also
('restricteddefinepriv',)
100.00%(3/3)
if ('getdeclaredmethodaccess', 'restricteddefinepriv') is contained in vector,
then also
('getdeclaredfieldaccess',)
100.00%(3/3)
if ('callanymethodhandlefromsystemclass', 'loadarbitraryclassescallerpriv') is contained in vector,
then also
('lookup',)
100.00%(4/4)
if ('callanymethodhandlefromsystemclass', 'loadarbitraryclassescallerpriv') is contained in vector,
then also
('restricteddefinepriv',)
100.00%(4/4)
if ('callanymethodhandlefromsystemclass', 'lookup') is contained in vector,
then also
('loadarbitraryclassescallerpriv',)
100.00%(4/4)
if ('callanymethodhandlefromsystemclass', 'lookup') is contained in vector,
then also
('restricteddefinepriv',)
100.00%(4/4)
if ('callanymethodhandlefromsystemclass', 'restricteddefinepriv') is contained in vector,
then also
('loadarbitraryclassescallerpriv',)
100.00%(4/4)
if ('callanymethodhandlefromsystemclass', 'restricteddefinepriv') is contained in vector,
then also
('lookup',)
100.00%(4/4)
if ('loadarbitraryclassescallerpriv', 'lookup') is contained in vector,
then also
('callanymethodhandlefromsystemclass',)
80.00%(4/5)
if ('loadarbitraryclassescallerpriv', 'lookup') is contained in vector,
then also
('restricteddefinepriv',)
100.00%(5/5)
if ('lookup', 'restricteddefinepriv') is contained in vector,
then also
('callanymethodhandlefromsystemclass',)
57.14%(4/7)
if ('lookup', 'restricteddefinepriv') is contained in vector,
then also
('loadarbitraryclassescallerpriv',)
71.43%(5/7)
if ('callstaticfromsystemclass', 'loadarbitraryclassescallerpriv') is contained in vector,
then also
('lookupcd',)
100.00%(10/10)
if ('callstaticfromsystemclass', 'loadarbitraryclassescallerpriv') is contained in vector,
then also
('restricteddefinepriv',)
100.00%(10/10)
if ('callstaticfromsystemclass', 'lookupcd') is contained in vector,
then also
('loadarbitraryclassescallerpriv',)
100.00%(10/10)
if ('callstaticfromsystemclass', 'lookupcd') is contained in vector,
then also
('restricteddefinepriv',)
100.00%(10/10)
if ('callstaticfromsystemclass', 'restricteddefinepriv') is contained in vector,
then also
('loadarbitraryclassescallerpriv',)
100.00%(10/10)
if ('callstaticfromsystemclass', 'restricteddefinepriv') is contained in vector,
then also
('lookupcd',)
100.00%(10/10)
if ('loadarbitraryclassescallerpriv', 'lookupcd') is contained in vector,
then also
('callstaticfromsystemclass',)
83.33%(10/12)
if ('loadarbitraryclassescallerpriv', 'lookupcd') is contained in vector,
then also
('restricteddefinepriv',)
83.33%(10/12)
if ('loadarbitraryclassescallerpriv', 'restricteddefinepriv') is contained in vector,
then also
('callstaticfromsystemclass',)
71.43%(10/14)
if ('loadarbitraryclassescallerpriv', 'restricteddefinepriv') is contained in vector,
then also
('lookupcd',)
71.43%(10/14)
if ('lookupcd', 'restricteddefinepriv') is contained in vector,
then also
('callstaticfromsystemclass',)
100.00%(10/10)
if ('lookupcd', 'restricteddefinepriv') is contained in vector,
then also
('loadarbitraryclassescallerpriv',)
100.00%(10/10)
if ('callsubsetfromsystemclass', 'loadarbitraryclassescallerpriv') is contained in vector,
then also
('getdeclaredconstructorpriv',)
66.67%(4/6)
if ('callsubsetfromsystemclass', 'loadarbitraryclassescallerpriv') is contained in vector,
then also
('getdeclaredfieldpriv',)
100.00%(6/6)
if ('callsubsetfromsystemclass', 'loadarbitraryclassescallerpriv') is contained in vector,
then also
('restrictedsetaccessible',)
100.00%(6/6)
if ('callsubsetfromsystemclass', 'getdeclaredconstructorpriv') is contained in vector,
then also
('loadarbitraryclassescallerpriv',)
100.00%(4/4)
if ('callsubsetfromsystemclass', 'getdeclaredconstructorpriv') is contained in vector,
then also
('getdeclaredfieldpriv',)
100.00%(4/4)
if ('callsubsetfromsystemclass', 'getdeclaredconstructorpriv') is contained in vector,
then also
('restrictedsetaccessible',)
100.00%(4/4)
if ('callsubsetfromsystemclass', 'getdeclaredfieldpriv') is contained in vector,
then also
('loadarbitraryclassescallerpriv',)
100.00%(6/6)
if ('callsubsetfromsystemclass', 'getdeclaredfieldpriv') is contained in vector,
then also
('getdeclaredconstructorpriv',)
66.67%(4/6)
if ('callsubsetfromsystemclass', 'getdeclaredfieldpriv') is contained in vector,
then also
('restrictedsetaccessible',)
100.00%(6/6)
if ('callsubsetfromsystemclass', 'restrictedsetaccessible') is contained in vector,
then also
('loadarbitraryclassescallerpriv',)
100.00%(6/6)
if ('callsubsetfromsystemclass', 'restrictedsetaccessible') is contained in vector,
then also
('getdeclaredconstructorpriv',)
66.67%(4/6)
if ('callsubsetfromsystemclass', 'restrictedsetaccessible') is contained in vector,
then also
('getdeclaredfieldpriv',)
100.00%(6/6)
if ('loadarbitraryclassescallerpriv', 'getdeclaredconstructorpriv') is contained in vector,
then also
('callsubsetfromsystemclass',)
100.00%(4/4)
if ('loadarbitraryclassescallerpriv', 'getdeclaredconstructorpriv') is contained in vector,
then also
('getdeclaredfieldpriv',)
100.00%(4/4)
if ('loadarbitraryclassescallerpriv', 'getdeclaredconstructorpriv') is contained in vector,
then also
('restrictedsetaccessible',)
100.00%(4/4)
if ('loadarbitraryclassescallerpriv', 'getdeclaredfieldpriv') is contained in vector,
then also
('callsubsetfromsystemclass',)
100.00%(6/6)
if ('loadarbitraryclassescallerpriv', 'getdeclaredfieldpriv') is contained in vector,
then also
('getdeclaredconstructorpriv',)
66.67%(4/6)
if ('loadarbitraryclassescallerpriv', 'getdeclaredfieldpriv') is contained in vector,
then also
('restrictedsetaccessible',)
100.00%(6/6)
if ('loadarbitraryclassescallerpriv', 'restrictedsetaccessible') is contained in vector,
then also
('callsubsetfromsystemclass',)
100.00%(6/6)
if ('loadarbitraryclassescallerpriv', 'restrictedsetaccessible') is contained in vector,
then also
('getdeclaredconstructorpriv',)
66.67%(4/6)
if ('loadarbitraryclassescallerpriv', 'restrictedsetaccessible') is contained in vector,
then also
('getdeclaredfieldpriv',)
100.00%(6/6)
if ('getdeclaredconstructorpriv', 'getdeclaredfieldpriv') is contained in vector,
then also
('callsubsetfromsystemclass',)
100.00%(4/4)
if ('getdeclaredconstructorpriv', 'getdeclaredfieldpriv') is contained in vector,
then also
('loadarbitraryclassescallerpriv',)
100.00%(4/4)
if ('getdeclaredconstructorpriv', 'getdeclaredfieldpriv') is contained in vector,
then also
('restrictedsetaccessible',)
100.00%(4/4)
if ('getdeclaredconstructorpriv', 'restrictedsetaccessible') is contained in vector,
then also
('callsubsetfromsystemclass',)
100.00%(4/4)
if ('getdeclaredconstructorpriv', 'restrictedsetaccessible') is contained in vector,
then also
('loadarbitraryclassescallerpriv',)
100.00%(4/4)
if ('getdeclaredconstructorpriv', 'restrictedsetaccessible') is contained in vector,
then also
('getdeclaredfieldpriv',)
100.00%(4/4)
if ('getdeclaredfieldpriv', 'restrictedsetaccessible') is contained in vector,
then also
('callsubsetfromsystemclass',)
100.00%(6/6)
if ('getdeclaredfieldpriv', 'restrictedsetaccessible') is contained in vector,
then also
('loadarbitraryclassescallerpriv',)
100.00%(6/6)
if ('getdeclaredfieldpriv', 'restrictedsetaccessible') is contained in vector,
then also
('getdeclaredconstructorpriv',)
66.67%(4/6)
if ('callstaticfromsystemclass', 'loadarbitraryclassescallerpriv') is contained in vector,
then also
('getdeclaredfieldaccess',)
70.00%(7/10)
if ('callstaticfromsystemclass', 'lookupcd') is contained in vector,
then also
('getdeclaredfieldaccess',)
70.00%(7/10)
if ('callstaticfromsystemclass', 'getdeclaredfieldaccess') is contained in vector,
then also
('loadarbitraryclassescallerpriv',)
100.00%(7/7)
if ('callstaticfromsystemclass', 'getdeclaredfieldaccess') is contained in vector,
then also
('lookupcd',)
100.00%(7/7)
if ('callstaticfromsystemclass', 'getdeclaredfieldaccess') is contained in vector,
then also
('restricteddefinepriv',)
100.00%(7/7)
if ('callstaticfromsystemclass', 'restricteddefinepriv') is contained in vector,
then also
('getdeclaredfieldaccess',)
70.00%(7/10)
if ('loadarbitraryclassescallerpriv', 'lookupcd') is contained in vector,
then also
('getdeclaredfieldaccess',)
58.33%(7/12)
if ('loadarbitraryclassescallerpriv', 'getdeclaredfieldaccess') is contained in vector,
then also
('callstaticfromsystemclass',)
87.50%(7/8)
if ('loadarbitraryclassescallerpriv', 'getdeclaredfieldaccess') is contained in vector,
then also
('lookupcd',)
87.50%(7/8)
if ('loadarbitraryclassescallerpriv', 'getdeclaredfieldaccess') is contained in vector,
then also
('restricteddefinepriv',)
100.00%(8/8)
if ('loadarbitraryclassescallerpriv', 'restricteddefinepriv') is contained in vector,
then also
('getdeclaredfieldaccess',)
57.14%(8/14)
if ('lookupcd', 'getdeclaredfieldaccess') is contained in vector,
then also
('callstaticfromsystemclass',)
100.00%(7/7)
if ('lookupcd', 'getdeclaredfieldaccess') is contained in vector,
then also
('loadarbitraryclassescallerpriv',)
100.00%(7/7)
if ('lookupcd', 'getdeclaredfieldaccess') is contained in vector,
then also
('restricteddefinepriv',)
100.00%(7/7)
if ('lookupcd', 'restricteddefinepriv') is contained in vector,
then also
('getdeclaredfieldaccess',)
70.00%(7/10)
if ('getdeclaredfieldaccess', 'restricteddefinepriv') is contained in vector,
then also
('callstaticfromsystemclass',)
58.33%(7/12)
if ('getdeclaredfieldaccess', 'restricteddefinepriv') is contained in vector,
then also
('loadarbitraryclassescallerpriv',)
66.67%(8/12)
if ('getdeclaredfieldaccess', 'restricteddefinepriv') is contained in vector,
then also
('lookupcd',)
58.33%(7/12)
if ('lookup', 'callanymethodhandlefromsystemclass') is contained in vector,
then also
('loadarbitraryclassescallerpriv',)
100.00%(4/4)
if ('lookup', 'callanymethodhandlefromsystemclass') is contained in vector,
then also
('restricteddefinepriv',)
100.00%(4/4)
if ('lookup', 'loadarbitraryclassescallerpriv') is contained in vector,
then also
('callanymethodhandlefromsystemclass',)
80.00%(4/5)
if ('lookup', 'loadarbitraryclassescallerpriv') is contained in vector,
then also
('restricteddefinepriv',)
100.00%(5/5)
if ('loadarbitraryclassescallerpriv', 'callstaticfromsystemclass') is contained in vector,
then also
('lookupcd',)
100.00%(10/10)
if ('loadarbitraryclassescallerpriv', 'callstaticfromsystemclass') is contained in vector,
then also
('restricteddefinepriv',)
100.00%(10/10)
if ('getdeclaredmethodaccess', 'getdeclaredfieldaccess') is contained in vector,
then also
('restricteddefinepriv',)
100.00%(3/3)
if ('loadarbitraryclasses', 'accesspublicmethod') is contained in vector,
then also
('restrictedgetfields',)
100.00%(3/3)
if ('loadarbitraryclasses', 'accesspublicmethod') is contained in vector,
then also
('getpublicconstructor',)
100.00%(3/3)
if ('loadarbitraryclasses', 'accesspublicmethod') is contained in vector,
then also
('restrictedsetaccessible',)
100.00%(3/3)
if ('loadarbitraryclasses', 'restrictedgetfields') is contained in vector,
then also
('accesspublicmethod',)
100.00%(3/3)
if ('loadarbitraryclasses', 'restrictedgetfields') is contained in vector,
then also
('getpublicconstructor',)
100.00%(3/3)
if ('loadarbitraryclasses', 'restrictedgetfields') is contained in vector,
then also
('restrictedsetaccessible',)
100.00%(3/3)
if ('loadarbitraryclasses', 'getpublicconstructor') is contained in vector,
then also
('accesspublicmethod',)
100.00%(3/3)
if ('loadarbitraryclasses', 'getpublicconstructor') is contained in vector,
then also
('restrictedgetfields',)
100.00%(3/3)
if ('loadarbitraryclasses', 'getpublicconstructor') is contained in vector,
then also
('restrictedsetaccessible',)
100.00%(3/3)
if ('loadarbitraryclasses', 'restrictedsetaccessible') is contained in vector,
then also
('accesspublicmethod',)
100.00%(3/3)
if ('loadarbitraryclasses', 'restrictedsetaccessible') is contained in vector,
then also
('restrictedgetfields',)
100.00%(3/3)
if ('loadarbitraryclasses', 'restrictedsetaccessible') is contained in vector,
then also
('getpublicconstructor',)
100.00%(3/3)
if ('accesspublicmethod', 'restrictedgetfields') is contained in vector,
then also
('loadarbitraryclasses',)
100.00%(3/3)
if ('accesspublicmethod', 'restrictedgetfields') is contained in vector,
then also
('getpublicconstructor',)
100.00%(3/3)
if ('accesspublicmethod', 'restrictedgetfields') is contained in vector,
then also
('restrictedsetaccessible',)
100.00%(3/3)
if ('accesspublicmethod', 'getpublicconstructor') is contained in vector,
then also
('loadarbitraryclasses',)
100.00%(3/3)
if ('accesspublicmethod', 'getpublicconstructor') is contained in vector,
then also
('restrictedgetfields',)
100.00%(3/3)
if ('accesspublicmethod', 'getpublicconstructor') is contained in vector,
then also
('restrictedsetaccessible',)
100.00%(3/3)
if ('accesspublicmethod', 'restrictedsetaccessible') is contained in vector,
then also
('loadarbitraryclasses',)
100.00%(3/3)
if ('accesspublicmethod', 'restrictedsetaccessible') is contained in vector,
then also
('restrictedgetfields',)
100.00%(3/3)
if ('accesspublicmethod', 'restrictedsetaccessible') is contained in vector,
then also
('getpublicconstructor',)
100.00%(3/3)
if ('restrictedgetfields', 'getpublicconstructor') is contained in vector,
then also
('loadarbitraryclasses',)
100.00%(3/3)
if ('restrictedgetfields', 'getpublicconstructor') is contained in vector,
then also
('accesspublicmethod',)
100.00%(3/3)
if ('restrictedgetfields', 'getpublicconstructor') is contained in vector,
then also
('restrictedsetaccessible',)
100.00%(3/3)
if ('restrictedgetfields', 'restrictedsetaccessible') is contained in vector,
then also
('loadarbitraryclasses',)
100.00%(3/3)
if ('restrictedgetfields', 'restrictedsetaccessible') is contained in vector,
then also
('accesspublicmethod',)
100.00%(3/3)
if ('restrictedgetfields', 'restrictedsetaccessible') is contained in vector,
then also
('getpublicconstructor',)
100.00%(3/3)
if ('getpublicconstructor', 'restrictedsetaccessible') is contained in vector,
then also
('loadarbitraryclasses',)
100.00%(3/3)
if ('getpublicconstructor', 'restrictedsetaccessible') is contained in vector,
then also
('accesspublicmethod',)
100.00%(3/3)
if ('getpublicconstructor', 'restrictedsetaccessible') is contained in vector,
then also
('restrictedgetfields',)
100.00%(3/3)
if ('callanymethodhandlefromsystemclass', 'loadarbitraryclassescallerpriv') is contained in vector,
then also
('lookup', 'restricteddefinepriv')
100.00%(4/4)
if ('callanymethodhandlefromsystemclass', 'lookup') is contained in vector,
then also
('loadarbitraryclassescallerpriv', 'restricteddefinepriv')
100.00%(4/4)
if ('callanymethodhandlefromsystemclass', 'restricteddefinepriv') is contained in vector,
then also
('loadarbitraryclassescallerpriv', 'lookup')
100.00%(4/4)
if ('loadarbitraryclassescallerpriv', 'lookup') is contained in vector,
then also
('callanymethodhandlefromsystemclass', 'restricteddefinepriv')
80.00%(4/5)
if ('lookup', 'restricteddefinepriv') is contained in vector,
then also
('callanymethodhandlefromsystemclass', 'loadarbitraryclassescallerpriv')
57.14%(4/7)
if ('callstaticfromsystemclass', 'loadarbitraryclassescallerpriv') is contained in vector,
then also
('lookupcd', 'restricteddefinepriv')
100.00%(10/10)
if ('callstaticfromsystemclass', 'lookupcd') is contained in vector,
then also
('loadarbitraryclassescallerpriv', 'restricteddefinepriv')
100.00%(10/10)
if ('callstaticfromsystemclass', 'restricteddefinepriv') is contained in vector,
then also
('loadarbitraryclassescallerpriv', 'lookupcd')
100.00%(10/10)
if ('loadarbitraryclassescallerpriv', 'lookupcd') is contained in vector,
then also
('callstaticfromsystemclass', 'restricteddefinepriv')
83.33%(10/12)
if ('loadarbitraryclassescallerpriv', 'restricteddefinepriv') is contained in vector,
then also
('callstaticfromsystemclass', 'lookupcd')
71.43%(10/14)
if ('lookupcd', 'restricteddefinepriv') is contained in vector,
then also
('callstaticfromsystemclass', 'loadarbitraryclassescallerpriv')
100.00%(10/10)
if ('callsubsetfromsystemclass', 'loadarbitraryclassescallerpriv') is contained in vector,
then also
('getdeclaredconstructorpriv', 'getdeclaredfieldpriv')
66.67%(4/6)
if ('callsubsetfromsystemclass', 'loadarbitraryclassescallerpriv') is contained in vector,
then also
('getdeclaredconstructorpriv', 'restrictedsetaccessible')
66.67%(4/6)
if ('callsubsetfromsystemclass', 'loadarbitraryclassescallerpriv') is contained in vector,
then also
('getdeclaredfieldpriv', 'restrictedsetaccessible')
100.00%(6/6)
if ('callsubsetfromsystemclass', 'getdeclaredconstructorpriv') is contained in vector,
then also
('loadarbitraryclassescallerpriv', 'getdeclaredfieldpriv')
100.00%(4/4)
if ('callsubsetfromsystemclass', 'getdeclaredconstructorpriv') is contained in vector,
then also
('loadarbitraryclassescallerpriv', 'restrictedsetaccessible')
100.00%(4/4)
if ('callsubsetfromsystemclass', 'getdeclaredconstructorpriv') is contained in vector,
then also
('getdeclaredfieldpriv', 'restrictedsetaccessible')
100.00%(4/4)
if ('callsubsetfromsystemclass', 'getdeclaredfieldpriv') is contained in vector,
then also
('loadarbitraryclassescallerpriv', 'getdeclaredconstructorpriv')
66.67%(4/6)
if ('callsubsetfromsystemclass', 'getdeclaredfieldpriv') is contained in vector,
then also
('loadarbitraryclassescallerpriv', 'restrictedsetaccessible')
100.00%(6/6)
if ('callsubsetfromsystemclass', 'getdeclaredfieldpriv') is contained in vector,
then also
('getdeclaredconstructorpriv', 'restrictedsetaccessible')
66.67%(4/6)
if ('callsubsetfromsystemclass', 'restrictedsetaccessible') is contained in vector,
then also
('loadarbitraryclassescallerpriv', 'getdeclaredconstructorpriv')
66.67%(4/6)
if ('callsubsetfromsystemclass', 'restrictedsetaccessible') is contained in vector,
then also
('loadarbitraryclassescallerpriv', 'getdeclaredfieldpriv')
100.00%(6/6)
if ('callsubsetfromsystemclass', 'restrictedsetaccessible') is contained in vector,
then also
('getdeclaredconstructorpriv', 'getdeclaredfieldpriv')
66.67%(4/6)
if ('loadarbitraryclassescallerpriv', 'getdeclaredconstructorpriv') is contained in vector,
then also
('callsubsetfromsystemclass', 'getdeclaredfieldpriv')
100.00%(4/4)
if ('loadarbitraryclassescallerpriv', 'getdeclaredconstructorpriv') is contained in vector,
then also
('callsubsetfromsystemclass', 'restrictedsetaccessible')
100.00%(4/4)
if ('loadarbitraryclassescallerpriv', 'getdeclaredconstructorpriv') is contained in vector,
then also
('getdeclaredfieldpriv', 'restrictedsetaccessible')
100.00%(4/4)
if ('loadarbitraryclassescallerpriv', 'getdeclaredfieldpriv') is contained in vector,
then also
('callsubsetfromsystemclass', 'getdeclaredconstructorpriv')
66.67%(4/6)
if ('loadarbitraryclassescallerpriv', 'getdeclaredfieldpriv') is contained in vector,
then also
('callsubsetfromsystemclass', 'restrictedsetaccessible')
100.00%(6/6)
if ('loadarbitraryclassescallerpriv', 'getdeclaredfieldpriv') is contained in vector,
then also
('getdeclaredconstructorpriv', 'restrictedsetaccessible')
66.67%(4/6)
if ('loadarbitraryclassescallerpriv', 'restrictedsetaccessible') is contained in vector,
then also
('callsubsetfromsystemclass', 'getdeclaredconstructorpriv')
66.67%(4/6)
if ('loadarbitraryclassescallerpriv', 'restrictedsetaccessible') is contained in vector,
then also
('callsubsetfromsystemclass', 'getdeclaredfieldpriv')
100.00%(6/6)
if ('loadarbitraryclassescallerpriv', 'restrictedsetaccessible') is contained in vector,
then also
('getdeclaredconstructorpriv', 'getdeclaredfieldpriv')
66.67%(4/6)
if ('getdeclaredconstructorpriv', 'getdeclaredfieldpriv') is contained in vector,
then also
('callsubsetfromsystemclass', 'loadarbitraryclassescallerpriv')
100.00%(4/4)
if ('getdeclaredconstructorpriv', 'getdeclaredfieldpriv') is contained in vector,
then also
('callsubsetfromsystemclass', 'restrictedsetaccessible')
100.00%(4/4)
if ('getdeclaredconstructorpriv', 'getdeclaredfieldpriv') is contained in vector,
then also
('loadarbitraryclassescallerpriv', 'restrictedsetaccessible')
100.00%(4/4)
if ('getdeclaredconstructorpriv', 'restrictedsetaccessible') is contained in vector,
then also
('callsubsetfromsystemclass', 'loadarbitraryclassescallerpriv')
100.00%(4/4)
if ('getdeclaredconstructorpriv', 'restrictedsetaccessible') is contained in vector,
then also
('callsubsetfromsystemclass', 'getdeclaredfieldpriv')
100.00%(4/4)
if ('getdeclaredconstructorpriv', 'restrictedsetaccessible') is contained in vector,
then also
('loadarbitraryclassescallerpriv', 'getdeclaredfieldpriv')
100.00%(4/4)
if ('getdeclaredfieldpriv', 'restrictedsetaccessible') is contained in vector,
then also
('callsubsetfromsystemclass', 'loadarbitraryclassescallerpriv')
100.00%(6/6)
if ('getdeclaredfieldpriv', 'restrictedsetaccessible') is contained in vector,
then also
('callsubsetfromsystemclass', 'getdeclaredconstructorpriv')
66.67%(4/6)
if ('getdeclaredfieldpriv', 'restrictedsetaccessible') is contained in vector,
then also
('loadarbitraryclassescallerpriv', 'getdeclaredconstructorpriv')
66.67%(4/6)
if ('callstaticfromsystemclass', 'loadarbitraryclassescallerpriv') is contained in vector,
then also
('lookupcd', 'getdeclaredfieldaccess')
70.00%(7/10)
if ('callstaticfromsystemclass', 'loadarbitraryclassescallerpriv') is contained in vector,
then also
('getdeclaredfieldaccess', 'restricteddefinepriv')
70.00%(7/10)
if ('callstaticfromsystemclass', 'lookupcd') is contained in vector,
then also
('loadarbitraryclassescallerpriv', 'getdeclaredfieldaccess')
70.00%(7/10)
if ('callstaticfromsystemclass', 'lookupcd') is contained in vector,
then also
('getdeclaredfieldaccess', 'restricteddefinepriv')
70.00%(7/10)
if ('callstaticfromsystemclass', 'getdeclaredfieldaccess') is contained in vector,
then also
('loadarbitraryclassescallerpriv', 'lookupcd')
100.00%(7/7)
if ('callstaticfromsystemclass', 'getdeclaredfieldaccess') is contained in vector,
then also
('loadarbitraryclassescallerpriv', 'restricteddefinepriv')
100.00%(7/7)
if ('callstaticfromsystemclass', 'getdeclaredfieldaccess') is contained in vector,
then also
('lookupcd', 'restricteddefinepriv')
100.00%(7/7)
if ('callstaticfromsystemclass', 'restricteddefinepriv') is contained in vector,
then also
('loadarbitraryclassescallerpriv', 'getdeclaredfieldaccess')
70.00%(7/10)
if ('callstaticfromsystemclass', 'restricteddefinepriv') is contained in vector,
then also
('lookupcd', 'getdeclaredfieldaccess')
70.00%(7/10)
if ('loadarbitraryclassescallerpriv', 'lookupcd') is contained in vector,
then also
('callstaticfromsystemclass', 'getdeclaredfieldaccess')
58.33%(7/12)
if ('loadarbitraryclassescallerpriv', 'lookupcd') is contained in vector,
then also
('getdeclaredfieldaccess', 'restricteddefinepriv')
58.33%(7/12)
if ('loadarbitraryclassescallerpriv', 'getdeclaredfieldaccess') is contained in vector,
then also
('callstaticfromsystemclass', 'lookupcd')
87.50%(7/8)
if ('loadarbitraryclassescallerpriv', 'getdeclaredfieldaccess') is contained in vector,
then also
('callstaticfromsystemclass', 'restricteddefinepriv')
87.50%(7/8)
if ('loadarbitraryclassescallerpriv', 'getdeclaredfieldaccess') is contained in vector,
then also
('lookupcd', 'restricteddefinepriv')
87.50%(7/8)
if ('lookupcd', 'getdeclaredfieldaccess') is contained in vector,
then also
('callstaticfromsystemclass', 'loadarbitraryclassescallerpriv')
100.00%(7/7)
if ('lookupcd', 'getdeclaredfieldaccess') is contained in vector,
then also
('callstaticfromsystemclass', 'restricteddefinepriv')
100.00%(7/7)
if ('lookupcd', 'getdeclaredfieldaccess') is contained in vector,
then also
('loadarbitraryclassescallerpriv', 'restricteddefinepriv')
100.00%(7/7)
if ('lookupcd', 'restricteddefinepriv') is contained in vector,
then also
('callstaticfromsystemclass', 'getdeclaredfieldaccess')
70.00%(7/10)
if ('lookupcd', 'restricteddefinepriv') is contained in vector,
then also
('loadarbitraryclassescallerpriv', 'getdeclaredfieldaccess')
70.00%(7/10)
if ('getdeclaredfieldaccess', 'restricteddefinepriv') is contained in vector,
then also
('callstaticfromsystemclass', 'loadarbitraryclassescallerpriv')
58.33%(7/12)
if ('getdeclaredfieldaccess', 'restricteddefinepriv') is contained in vector,
then also
('callstaticfromsystemclass', 'lookupcd')
58.33%(7/12)
if ('getdeclaredfieldaccess', 'restricteddefinepriv') is contained in vector,
then also
('loadarbitraryclassescallerpriv', 'lookupcd')
58.33%(7/12)
if ('lookup', 'callanymethodhandlefromsystemclass') is contained in vector,
then also
('loadarbitraryclassescallerpriv', 'restricteddefinepriv')
100.00%(4/4)
if ('lookup', 'loadarbitraryclassescallerpriv') is contained in vector,
then also
('callanymethodhandlefromsystemclass', 'restricteddefinepriv')
80.00%(4/5)
if ('callanymethodhandlefromsystemclass', 'restricteddefinepriv') is contained in vector,
then also
('lookup', 'loadarbitraryclassescallerpriv')
100.00%(4/4)
if ('loadarbitraryclassescallerpriv', 'callstaticfromsystemclass') is contained in vector,
then also
('lookupcd', 'restricteddefinepriv')
100.00%(10/10)
if ('lookupcd', 'restricteddefinepriv') is contained in vector,
then also
('loadarbitraryclassescallerpriv', 'callstaticfromsystemclass')
100.00%(10/10)
if ('loadarbitraryclasses', 'accesspublicmethod') is contained in vector,
then also
('restrictedgetfields', 'getpublicconstructor')
100.00%(3/3)
if ('loadarbitraryclasses', 'accesspublicmethod') is contained in vector,
then also
('restrictedgetfields', 'restrictedsetaccessible')
100.00%(3/3)
if ('loadarbitraryclasses', 'accesspublicmethod') is contained in vector,
then also
('getpublicconstructor', 'restrictedsetaccessible')
100.00%(3/3)
if ('loadarbitraryclasses', 'restrictedgetfields') is contained in vector,
then also
('accesspublicmethod', 'getpublicconstructor')
100.00%(3/3)
if ('loadarbitraryclasses', 'restrictedgetfields') is contained in vector,
then also
('accesspublicmethod', 'restrictedsetaccessible')
100.00%(3/3)
if ('loadarbitraryclasses', 'restrictedgetfields') is contained in vector,
then also
('getpublicconstructor', 'restrictedsetaccessible')
100.00%(3/3)
if ('loadarbitraryclasses', 'getpublicconstructor') is contained in vector,
then also
('accesspublicmethod', 'restrictedgetfields')
100.00%(3/3)
if ('loadarbitraryclasses', 'getpublicconstructor') is contained in vector,
then also
('accesspublicmethod', 'restrictedsetaccessible')
100.00%(3/3)
if ('loadarbitraryclasses', 'getpublicconstructor') is contained in vector,
then also
('restrictedgetfields', 'restrictedsetaccessible')
100.00%(3/3)
if ('loadarbitraryclasses', 'restrictedsetaccessible') is contained in vector,
then also
('accesspublicmethod', 'restrictedgetfields')
100.00%(3/3)
if ('loadarbitraryclasses', 'restrictedsetaccessible') is contained in vector,
then also
('accesspublicmethod', 'getpublicconstructor')
100.00%(3/3)
if ('loadarbitraryclasses', 'restrictedsetaccessible') is contained in vector,
then also
('restrictedgetfields', 'getpublicconstructor')
100.00%(3/3)
if ('accesspublicmethod', 'restrictedgetfields') is contained in vector,
then also
('loadarbitraryclasses', 'getpublicconstructor')
100.00%(3/3)
if ('accesspublicmethod', 'restrictedgetfields') is contained in vector,
then also
('loadarbitraryclasses', 'restrictedsetaccessible')
100.00%(3/3)
if ('accesspublicmethod', 'restrictedgetfields') is contained in vector,
then also
('getpublicconstructor', 'restrictedsetaccessible')
100.00%(3/3)
if ('accesspublicmethod', 'getpublicconstructor') is contained in vector,
then also
('loadarbitraryclasses', 'restrictedgetfields')
100.00%(3/3)
if ('accesspublicmethod', 'getpublicconstructor') is contained in vector,
then also
('loadarbitraryclasses', 'restrictedsetaccessible')
100.00%(3/3)
if ('accesspublicmethod', 'getpublicconstructor') is contained in vector,
then also
('restrictedgetfields', 'restrictedsetaccessible')
100.00%(3/3)
if ('accesspublicmethod', 'restrictedsetaccessible') is contained in vector,
then also
('loadarbitraryclasses', 'restrictedgetfields')
100.00%(3/3)
if ('accesspublicmethod', 'restrictedsetaccessible') is contained in vector,
then also
('loadarbitraryclasses', 'getpublicconstructor')
100.00%(3/3)
if ('accesspublicmethod', 'restrictedsetaccessible') is contained in vector,
then also
('restrictedgetfields', 'getpublicconstructor')
100.00%(3/3)
if ('restrictedgetfields', 'getpublicconstructor') is contained in vector,
then also
('loadarbitraryclasses', 'accesspublicmethod')
100.00%(3/3)
if ('restrictedgetfields', 'getpublicconstructor') is contained in vector,
then also
('loadarbitraryclasses', 'restrictedsetaccessible')
100.00%(3/3)
if ('restrictedgetfields', 'getpublicconstructor') is contained in vector,
then also
('accesspublicmethod', 'restrictedsetaccessible')
100.00%(3/3)
if ('restrictedgetfields', 'restrictedsetaccessible') is contained in vector,
then also
('loadarbitraryclasses', 'accesspublicmethod')
100.00%(3/3)
if ('restrictedgetfields', 'restrictedsetaccessible') is contained in vector,
then also
('loadarbitraryclasses', 'getpublicconstructor')
100.00%(3/3)
if ('restrictedgetfields', 'restrictedsetaccessible') is contained in vector,
then also
('accesspublicmethod', 'getpublicconstructor')
100.00%(3/3)
if ('getpublicconstructor', 'restrictedsetaccessible') is contained in vector,
then also
('loadarbitraryclasses', 'accesspublicmethod')
100.00%(3/3)
if ('getpublicconstructor', 'restrictedsetaccessible') is contained in vector,
then also
('loadarbitraryclasses', 'restrictedgetfields')
100.00%(3/3)
if ('getpublicconstructor', 'restrictedsetaccessible') is contained in vector,
then also
('accesspublicmethod', 'restrictedgetfields')
100.00%(3/3)
if ('callsubsetfromsystemclass', 'loadarbitraryclassescallerpriv') is contained in vector,
then also
('getdeclaredconstructorpriv', 'getdeclaredfieldpriv', 'restrictedsetaccessible')
66.67%(4/6)
if ('callsubsetfromsystemclass', 'getdeclaredconstructorpriv') is contained in vector,
then also
('loadarbitraryclassescallerpriv', 'getdeclaredfieldpriv', 'restrictedsetaccessible')
100.00%(4/4)
if ('callsubsetfromsystemclass', 'getdeclaredfieldpriv') is contained in vector,
then also
('loadarbitraryclassescallerpriv', 'getdeclaredconstructorpriv', 'restrictedsetaccessible')
66.67%(4/6)
if ('callsubsetfromsystemclass', 'restrictedsetaccessible') is contained in vector,
then also
('loadarbitraryclassescallerpriv', 'getdeclaredconstructorpriv', 'getdeclaredfieldpriv')
66.67%(4/6)
if ('loadarbitraryclassescallerpriv', 'getdeclaredconstructorpriv') is contained in vector,
then also
('callsubsetfromsystemclass', 'getdeclaredfieldpriv', 'restrictedsetaccessible')
100.00%(4/4)
if ('loadarbitraryclassescallerpriv', 'getdeclaredfieldpriv') is contained in vector,
then also
('callsubsetfromsystemclass', 'getdeclaredconstructorpriv', 'restrictedsetaccessible')
66.67%(4/6)
if ('loadarbitraryclassescallerpriv', 'restrictedsetaccessible') is contained in vector,
then also
('callsubsetfromsystemclass', 'getdeclaredconstructorpriv', 'getdeclaredfieldpriv')
66.67%(4/6)
if ('getdeclaredconstructorpriv', 'getdeclaredfieldpriv') is contained in vector,
then also
('callsubsetfromsystemclass', 'loadarbitraryclassescallerpriv', 'restrictedsetaccessible')
100.00%(4/4)
if ('getdeclaredconstructorpriv', 'restrictedsetaccessible') is contained in vector,
then also
('callsubsetfromsystemclass', 'loadarbitraryclassescallerpriv', 'getdeclaredfieldpriv')
100.00%(4/4)
if ('getdeclaredfieldpriv', 'restrictedsetaccessible') is contained in vector,
then also
('callsubsetfromsystemclass', 'loadarbitraryclassescallerpriv', 'getdeclaredconstructorpriv')
66.67%(4/6)
if ('callstaticfromsystemclass', 'loadarbitraryclassescallerpriv') is contained in vector,
then also
('lookupcd', 'getdeclaredfieldaccess', 'restricteddefinepriv')
70.00%(7/10)
if ('callstaticfromsystemclass', 'lookupcd') is contained in vector,
then also
('loadarbitraryclassescallerpriv', 'getdeclaredfieldaccess', 'restricteddefinepriv')
70.00%(7/10)
if ('callstaticfromsystemclass', 'getdeclaredfieldaccess') is contained in vector,
then also
('loadarbitraryclassescallerpriv', 'lookupcd', 'restricteddefinepriv')
100.00%(7/7)
if ('callstaticfromsystemclass', 'restricteddefinepriv') is contained in vector,
then also
('loadarbitraryclassescallerpriv', 'lookupcd', 'getdeclaredfieldaccess')
70.00%(7/10)
if ('loadarbitraryclassescallerpriv', 'lookupcd') is contained in vector,
then also
('callstaticfromsystemclass', 'getdeclaredfieldaccess', 'restricteddefinepriv')
58.33%(7/12)
if ('loadarbitraryclassescallerpriv', 'getdeclaredfieldaccess') is contained in vector,
then also
('callstaticfromsystemclass', 'lookupcd', 'restricteddefinepriv')
87.50%(7/8)
if ('lookupcd', 'getdeclaredfieldaccess') is contained in vector,
then also
('callstaticfromsystemclass', 'loadarbitraryclassescallerpriv', 'restricteddefinepriv')
100.00%(7/7)
if ('lookupcd', 'restricteddefinepriv') is contained in vector,
then also
('callstaticfromsystemclass', 'loadarbitraryclassescallerpriv', 'getdeclaredfieldaccess')
70.00%(7/10)
if ('getdeclaredfieldaccess', 'restricteddefinepriv') is contained in vector,
then also
('callstaticfromsystemclass', 'loadarbitraryclassescallerpriv', 'lookupcd')
58.33%(7/12)
if ('loadarbitraryclasses', 'accesspublicmethod') is contained in vector,
then also
('restrictedgetfields', 'getpublicconstructor', 'restrictedsetaccessible')
100.00%(3/3)
if ('loadarbitraryclasses', 'restrictedgetfields') is contained in vector,
then also
('accesspublicmethod', 'getpublicconstructor', 'restrictedsetaccessible')
100.00%(3/3)
if ('loadarbitraryclasses', 'getpublicconstructor') is contained in vector,
then also
('accesspublicmethod', 'restrictedgetfields', 'restrictedsetaccessible')
100.00%(3/3)
if ('loadarbitraryclasses', 'restrictedsetaccessible') is contained in vector,
then also
('accesspublicmethod', 'restrictedgetfields', 'getpublicconstructor')
100.00%(3/3)
if ('accesspublicmethod', 'restrictedgetfields') is contained in vector,
then also
('loadarbitraryclasses', 'getpublicconstructor', 'restrictedsetaccessible')
100.00%(3/3)
if ('accesspublicmethod', 'getpublicconstructor') is contained in vector,
then also
('loadarbitraryclasses', 'restrictedgetfields', 'restrictedsetaccessible')
100.00%(3/3)
if ('accesspublicmethod', 'restrictedsetaccessible') is contained in vector,
then also
('loadarbitraryclasses', 'restrictedgetfields', 'getpublicconstructor')
100.00%(3/3)
if ('restrictedgetfields', 'getpublicconstructor') is contained in vector,
then also
('loadarbitraryclasses', 'accesspublicmethod', 'restrictedsetaccessible')
100.00%(3/3)
if ('restrictedgetfields', 'restrictedsetaccessible') is contained in vector,
then also
('loadarbitraryclasses', 'accesspublicmethod', 'getpublicconstructor')
100.00%(3/3)
if ('getpublicconstructor', 'restrictedsetaccessible') is contained in vector,
then also
('loadarbitraryclasses', 'accesspublicmethod', 'restrictedgetfields')
100.00%(3/3)
if ('callanymethodhandlefromsystemclass', 'loadarbitraryclassescallerpriv', 'lookup') is contained in vector,
then also
('restricteddefinepriv',)
100.00%(4/4)
if ('callanymethodhandlefromsystemclass', 'loadarbitraryclassescallerpriv', 'restricteddefinepriv') is contained in vector,
then also
('lookup',)
100.00%(4/4)
if ('callanymethodhandlefromsystemclass', 'lookup', 'restricteddefinepriv') is contained in vector,
then also
('loadarbitraryclassescallerpriv',)
100.00%(4/4)
if ('loadarbitraryclassescallerpriv', 'lookup', 'restricteddefinepriv') is contained in vector,
then also
('callanymethodhandlefromsystemclass',)
80.00%(4/5)
if ('callstaticfromsystemclass', 'loadarbitraryclassescallerpriv', 'lookupcd') is contained in vector,
then also
('restricteddefinepriv',)
100.00%(10/10)
if ('callstaticfromsystemclass', 'loadarbitraryclassescallerpriv', 'restricteddefinepriv') is contained in vector,
then also
('lookupcd',)
100.00%(10/10)
if ('callstaticfromsystemclass', 'lookupcd', 'restricteddefinepriv') is contained in vector,
then also
('loadarbitraryclassescallerpriv',)
100.00%(10/10)
if ('loadarbitraryclassescallerpriv', 'lookupcd', 'restricteddefinepriv') is contained in vector,
then also
('callstaticfromsystemclass',)
100.00%(10/10)
if ('callsubsetfromsystemclass', 'loadarbitraryclassescallerpriv', 'getdeclaredconstructorpriv') is contained in vector,
then also
('getdeclaredfieldpriv',)
100.00%(4/4)
if ('callsubsetfromsystemclass', 'loadarbitraryclassescallerpriv', 'getdeclaredconstructorpriv') is contained in vector,
then also
('restrictedsetaccessible',)
100.00%(4/4)
if ('callsubsetfromsystemclass', 'loadarbitraryclassescallerpriv', 'getdeclaredfieldpriv') is contained in vector,
then also
('getdeclaredconstructorpriv',)
66.67%(4/6)
if ('callsubsetfromsystemclass', 'loadarbitraryclassescallerpriv', 'getdeclaredfieldpriv') is contained in vector,
then also
('restrictedsetaccessible',)
100.00%(6/6)
if ('callsubsetfromsystemclass', 'loadarbitraryclassescallerpriv', 'restrictedsetaccessible') is contained in vector,
then also
('getdeclaredconstructorpriv',)
66.67%(4/6)
if ('callsubsetfromsystemclass', 'loadarbitraryclassescallerpriv', 'restrictedsetaccessible') is contained in vector,
then also
('getdeclaredfieldpriv',)
100.00%(6/6)
if ('callsubsetfromsystemclass', 'getdeclaredconstructorpriv', 'getdeclaredfieldpriv') is contained in vector,
then also
('loadarbitraryclassescallerpriv',)
100.00%(4/4)
if ('callsubsetfromsystemclass', 'getdeclaredconstructorpriv', 'getdeclaredfieldpriv') is contained in vector,
then also
('restrictedsetaccessible',)
100.00%(4/4)
if ('callsubsetfromsystemclass', 'getdeclaredconstructorpriv', 'restrictedsetaccessible') is contained in vector,
then also
('loadarbitraryclassescallerpriv',)
100.00%(4/4)
if ('callsubsetfromsystemclass', 'getdeclaredconstructorpriv', 'restrictedsetaccessible') is contained in vector,
then also
('getdeclaredfieldpriv',)
100.00%(4/4)
if ('callsubsetfromsystemclass', 'getdeclaredfieldpriv', 'restrictedsetaccessible') is contained in vector,
then also
('loadarbitraryclassescallerpriv',)
100.00%(6/6)
if ('callsubsetfromsystemclass', 'getdeclaredfieldpriv', 'restrictedsetaccessible') is contained in vector,
then also
('getdeclaredconstructorpriv',)
66.67%(4/6)
if ('loadarbitraryclassescallerpriv', 'getdeclaredconstructorpriv', 'getdeclaredfieldpriv') is contained in vector,
then also
('callsubsetfromsystemclass',)
100.00%(4/4)
if ('loadarbitraryclassescallerpriv', 'getdeclaredconstructorpriv', 'getdeclaredfieldpriv') is contained in vector,
then also
('restrictedsetaccessible',)
100.00%(4/4)
if ('loadarbitraryclassescallerpriv', 'getdeclaredconstructorpriv', 'restrictedsetaccessible') is contained in vector,
then also
('callsubsetfromsystemclass',)
100.00%(4/4)
if ('loadarbitraryclassescallerpriv', 'getdeclaredconstructorpriv', 'restrictedsetaccessible') is contained in vector,
then also
('getdeclaredfieldpriv',)
100.00%(4/4)
if ('loadarbitraryclassescallerpriv', 'getdeclaredfieldpriv', 'restrictedsetaccessible') is contained in vector,
then also
('callsubsetfromsystemclass',)
100.00%(6/6)
if ('loadarbitraryclassescallerpriv', 'getdeclaredfieldpriv', 'restrictedsetaccessible') is contained in vector,
then also
('getdeclaredconstructorpriv',)
66.67%(4/6)
if ('getdeclaredconstructorpriv', 'getdeclaredfieldpriv', 'restrictedsetaccessible') is contained in vector,
then also
('callsubsetfromsystemclass',)
100.00%(4/4)
if ('getdeclaredconstructorpriv', 'getdeclaredfieldpriv', 'restrictedsetaccessible') is contained in vector,
then also
('loadarbitraryclassescallerpriv',)
100.00%(4/4)
if ('callstaticfromsystemclass', 'loadarbitraryclassescallerpriv', 'lookupcd') is contained in vector,
then also
('getdeclaredfieldaccess',)
70.00%(7/10)
if ('callstaticfromsystemclass', 'loadarbitraryclassescallerpriv', 'getdeclaredfieldaccess') is contained in vector,
then also
('lookupcd',)
100.00%(7/7)
if ('callstaticfromsystemclass', 'loadarbitraryclassescallerpriv', 'getdeclaredfieldaccess') is contained in vector,
then also
('restricteddefinepriv',)
100.00%(7/7)
if ('callstaticfromsystemclass', 'loadarbitraryclassescallerpriv', 'restricteddefinepriv') is contained in vector,
then also
('getdeclaredfieldaccess',)
70.00%(7/10)
if ('callstaticfromsystemclass', 'lookupcd', 'getdeclaredfieldaccess') is contained in vector,
then also
('loadarbitraryclassescallerpriv',)
100.00%(7/7)
if ('callstaticfromsystemclass', 'lookupcd', 'getdeclaredfieldaccess') is contained in vector,
then also
('restricteddefinepriv',)
100.00%(7/7)
if ('callstaticfromsystemclass', 'lookupcd', 'restricteddefinepriv') is contained in vector,
then also
('getdeclaredfieldaccess',)
70.00%(7/10)
if ('callstaticfromsystemclass', 'getdeclaredfieldaccess', 'restricteddefinepriv') is contained in vector,
then also
('loadarbitraryclassescallerpriv',)
100.00%(7/7)
if ('callstaticfromsystemclass', 'getdeclaredfieldaccess', 'restricteddefinepriv') is contained in vector,
then also
('lookupcd',)
100.00%(7/7)
if ('loadarbitraryclassescallerpriv', 'lookupcd', 'getdeclaredfieldaccess') is contained in vector,
then also
('callstaticfromsystemclass',)
100.00%(7/7)
if ('loadarbitraryclassescallerpriv', 'lookupcd', 'getdeclaredfieldaccess') is contained in vector,
then also
('restricteddefinepriv',)
100.00%(7/7)
if ('loadarbitraryclassescallerpriv', 'lookupcd', 'restricteddefinepriv') is contained in vector,
then also
('getdeclaredfieldaccess',)
70.00%(7/10)
if ('loadarbitraryclassescallerpriv', 'getdeclaredfieldaccess', 'restricteddefinepriv') is contained in vector,
then also
('callstaticfromsystemclass',)
87.50%(7/8)
if ('loadarbitraryclassescallerpriv', 'getdeclaredfieldaccess', 'restricteddefinepriv') is contained in vector,
then also
('lookupcd',)
87.50%(7/8)
if ('lookupcd', 'getdeclaredfieldaccess', 'restricteddefinepriv') is contained in vector,
then also
('callstaticfromsystemclass',)
100.00%(7/7)
if ('lookupcd', 'getdeclaredfieldaccess', 'restricteddefinepriv') is contained in vector,
then also
('loadarbitraryclassescallerpriv',)
100.00%(7/7)
if ('lookup', 'callanymethodhandlefromsystemclass', 'loadarbitraryclassescallerpriv') is contained in vector,
then also
('restricteddefinepriv',)
100.00%(4/4)
if ('lookup', 'callanymethodhandlefromsystemclass', 'restricteddefinepriv') is contained in vector,
then also
('loadarbitraryclassescallerpriv',)
100.00%(4/4)
if ('lookup', 'loadarbitraryclassescallerpriv', 'restricteddefinepriv') is contained in vector,
then also
('callanymethodhandlefromsystemclass',)
80.00%(4/5)
if ('loadarbitraryclassescallerpriv', 'callstaticfromsystemclass', 'lookupcd') is contained in vector,
then also
('restricteddefinepriv',)
100.00%(10/10)
if ('loadarbitraryclassescallerpriv', 'callstaticfromsystemclass', 'restricteddefinepriv') is contained in vector,
then also
('lookupcd',)
100.00%(10/10)
if ('loadarbitraryclasses', 'accesspublicmethod', 'restrictedgetfields') is contained in vector,
then also
('getpublicconstructor',)
100.00%(3/3)
if ('loadarbitraryclasses', 'accesspublicmethod', 'restrictedgetfields') is contained in vector,
then also
('restrictedsetaccessible',)
100.00%(3/3)
if ('loadarbitraryclasses', 'accesspublicmethod', 'getpublicconstructor') is contained in vector,
then also
('restrictedgetfields',)
100.00%(3/3)
if ('loadarbitraryclasses', 'accesspublicmethod', 'getpublicconstructor') is contained in vector,
then also
('restrictedsetaccessible',)
100.00%(3/3)
if ('loadarbitraryclasses', 'accesspublicmethod', 'restrictedsetaccessible') is contained in vector,
then also
('restrictedgetfields',)
100.00%(3/3)
if ('loadarbitraryclasses', 'accesspublicmethod', 'restrictedsetaccessible') is contained in vector,
then also
('getpublicconstructor',)
100.00%(3/3)
if ('loadarbitraryclasses', 'restrictedgetfields', 'getpublicconstructor') is contained in vector,
then also
('accesspublicmethod',)
100.00%(3/3)
if ('loadarbitraryclasses', 'restrictedgetfields', 'getpublicconstructor') is contained in vector,
then also
('restrictedsetaccessible',)
100.00%(3/3)
if ('loadarbitraryclasses', 'restrictedgetfields', 'restrictedsetaccessible') is contained in vector,
then also
('accesspublicmethod',)
100.00%(3/3)
if ('loadarbitraryclasses', 'restrictedgetfields', 'restrictedsetaccessible') is contained in vector,
then also
('getpublicconstructor',)
100.00%(3/3)
if ('loadarbitraryclasses', 'getpublicconstructor', 'restrictedsetaccessible') is contained in vector,
then also
('accesspublicmethod',)
100.00%(3/3)
if ('loadarbitraryclasses', 'getpublicconstructor', 'restrictedsetaccessible') is contained in vector,
then also
('restrictedgetfields',)
100.00%(3/3)
if ('accesspublicmethod', 'restrictedgetfields', 'getpublicconstructor') is contained in vector,
then also
('loadarbitraryclasses',)
100.00%(3/3)
if ('accesspublicmethod', 'restrictedgetfields', 'getpublicconstructor') is contained in vector,
then also
('restrictedsetaccessible',)
100.00%(3/3)
if ('accesspublicmethod', 'restrictedgetfields', 'restrictedsetaccessible') is contained in vector,
then also
('loadarbitraryclasses',)
100.00%(3/3)
if ('accesspublicmethod', 'restrictedgetfields', 'restrictedsetaccessible') is contained in vector,
then also
('getpublicconstructor',)
100.00%(3/3)
if ('accesspublicmethod', 'getpublicconstructor', 'restrictedsetaccessible') is contained in vector,
then also
('loadarbitraryclasses',)
100.00%(3/3)
if ('accesspublicmethod', 'getpublicconstructor', 'restrictedsetaccessible') is contained in vector,
then also
('restrictedgetfields',)
100.00%(3/3)
if ('restrictedgetfields', 'getpublicconstructor', 'restrictedsetaccessible') is contained in vector,
then also
('loadarbitraryclasses',)
100.00%(3/3)
if ('restrictedgetfields', 'getpublicconstructor', 'restrictedsetaccessible') is contained in vector,
then also
('accesspublicmethod',)
100.00%(3/3)
if ('callsubsetfromsystemclass', 'loadarbitraryclassescallerpriv', 'getdeclaredconstructorpriv') is contained in vector,
then also
('getdeclaredfieldpriv', 'restrictedsetaccessible')
100.00%(4/4)
if ('callsubsetfromsystemclass', 'loadarbitraryclassescallerpriv', 'getdeclaredfieldpriv') is contained in vector,
then also
('getdeclaredconstructorpriv', 'restrictedsetaccessible')
66.67%(4/6)
if ('callsubsetfromsystemclass', 'loadarbitraryclassescallerpriv', 'restrictedsetaccessible') is contained in vector,
then also
('getdeclaredconstructorpriv', 'getdeclaredfieldpriv')
66.67%(4/6)
if ('callsubsetfromsystemclass', 'getdeclaredconstructorpriv', 'getdeclaredfieldpriv') is contained in vector,
then also
('loadarbitraryclassescallerpriv', 'restrictedsetaccessible')
100.00%(4/4)
if ('callsubsetfromsystemclass', 'getdeclaredconstructorpriv', 'restrictedsetaccessible') is contained in vector,
then also
('loadarbitraryclassescallerpriv', 'getdeclaredfieldpriv')
100.00%(4/4)
if ('callsubsetfromsystemclass', 'getdeclaredfieldpriv', 'restrictedsetaccessible') is contained in vector,
then also
('loadarbitraryclassescallerpriv', 'getdeclaredconstructorpriv')
66.67%(4/6)
if ('loadarbitraryclassescallerpriv', 'getdeclaredconstructorpriv', 'getdeclaredfieldpriv') is contained in vector,
then also
('callsubsetfromsystemclass', 'restrictedsetaccessible')
100.00%(4/4)
if ('loadarbitraryclassescallerpriv', 'getdeclaredconstructorpriv', 'restrictedsetaccessible') is contained in vector,
then also
('callsubsetfromsystemclass', 'getdeclaredfieldpriv')
100.00%(4/4)
if ('loadarbitraryclassescallerpriv', 'getdeclaredfieldpriv', 'restrictedsetaccessible') is contained in vector,
then also
('callsubsetfromsystemclass', 'getdeclaredconstructorpriv')
66.67%(4/6)
if ('getdeclaredconstructorpriv', 'getdeclaredfieldpriv', 'restrictedsetaccessible') is contained in vector,
then also
('callsubsetfromsystemclass', 'loadarbitraryclassescallerpriv')
100.00%(4/4)
if ('callstaticfromsystemclass', 'loadarbitraryclassescallerpriv', 'lookupcd') is contained in vector,
then also
('getdeclaredfieldaccess', 'restricteddefinepriv')
70.00%(7/10)
if ('callstaticfromsystemclass', 'loadarbitraryclassescallerpriv', 'getdeclaredfieldaccess') is contained in vector,
then also
('lookupcd', 'restricteddefinepriv')
100.00%(7/7)
if ('callstaticfromsystemclass', 'loadarbitraryclassescallerpriv', 'restricteddefinepriv') is contained in vector,
then also
('lookupcd', 'getdeclaredfieldaccess')
70.00%(7/10)
if ('callstaticfromsystemclass', 'lookupcd', 'getdeclaredfieldaccess') is contained in vector,
then also
('loadarbitraryclassescallerpriv', 'restricteddefinepriv')
100.00%(7/7)
if ('callstaticfromsystemclass', 'lookupcd', 'restricteddefinepriv') is contained in vector,
then also
('loadarbitraryclassescallerpriv', 'getdeclaredfieldaccess')
70.00%(7/10)
if ('callstaticfromsystemclass', 'getdeclaredfieldaccess', 'restricteddefinepriv') is contained in vector,
then also
('loadarbitraryclassescallerpriv', 'lookupcd')
100.00%(7/7)
if ('loadarbitraryclassescallerpriv', 'lookupcd', 'getdeclaredfieldaccess') is contained in vector,
then also
('callstaticfromsystemclass', 'restricteddefinepriv')
100.00%(7/7)
if ('loadarbitraryclassescallerpriv', 'lookupcd', 'restricteddefinepriv') is contained in vector,
then also
('callstaticfromsystemclass', 'getdeclaredfieldaccess')
70.00%(7/10)
if ('loadarbitraryclassescallerpriv', 'getdeclaredfieldaccess', 'restricteddefinepriv') is contained in vector,
then also
('callstaticfromsystemclass', 'lookupcd')
87.50%(7/8)
if ('lookupcd', 'getdeclaredfieldaccess', 'restricteddefinepriv') is contained in vector,
then also
('callstaticfromsystemclass', 'loadarbitraryclassescallerpriv')
100.00%(7/7)
if ('loadarbitraryclasses', 'accesspublicmethod', 'restrictedgetfields') is contained in vector,
then also
('getpublicconstructor', 'restrictedsetaccessible')
100.00%(3/3)
if ('loadarbitraryclasses', 'accesspublicmethod', 'getpublicconstructor') is contained in vector,
then also
('restrictedgetfields', 'restrictedsetaccessible')
100.00%(3/3)
if ('loadarbitraryclasses', 'accesspublicmethod', 'restrictedsetaccessible') is contained in vector,
then also
('restrictedgetfields', 'getpublicconstructor')
100.00%(3/3)
if ('loadarbitraryclasses', 'restrictedgetfields', 'getpublicconstructor') is contained in vector,
then also
('accesspublicmethod', 'restrictedsetaccessible')
100.00%(3/3)
if ('loadarbitraryclasses', 'restrictedgetfields', 'restrictedsetaccessible') is contained in vector,
then also
('accesspublicmethod', 'getpublicconstructor')
100.00%(3/3)
if ('loadarbitraryclasses', 'getpublicconstructor', 'restrictedsetaccessible') is contained in vector,
then also
('accesspublicmethod', 'restrictedgetfields')
100.00%(3/3)
if ('accesspublicmethod', 'restrictedgetfields', 'getpublicconstructor') is contained in vector,
then also
('loadarbitraryclasses', 'restrictedsetaccessible')
100.00%(3/3)
if ('accesspublicmethod', 'restrictedgetfields', 'restrictedsetaccessible') is contained in vector,
then also
('loadarbitraryclasses', 'getpublicconstructor')
100.00%(3/3)
if ('accesspublicmethod', 'getpublicconstructor', 'restrictedsetaccessible') is contained in vector,
then also
('loadarbitraryclasses', 'restrictedgetfields')
100.00%(3/3)
if ('restrictedgetfields', 'getpublicconstructor', 'restrictedsetaccessible') is contained in vector,
then also
('loadarbitraryclasses', 'accesspublicmethod')
100.00%(3/3)
if ('callsubsetfromsystemclass', 'loadarbitraryclassescallerpriv', 'getdeclaredconstructorpriv', 'getdeclaredfieldpriv') is contained in vector,
then also
('restrictedsetaccessible',)
100.00%(4/4)
if ('callsubsetfromsystemclass', 'loadarbitraryclassescallerpriv', 'getdeclaredconstructorpriv', 'restrictedsetaccessible') is contained in vector,
then also
('getdeclaredfieldpriv',)
100.00%(4/4)
if ('callsubsetfromsystemclass', 'loadarbitraryclassescallerpriv', 'getdeclaredfieldpriv', 'restrictedsetaccessible') is contained in vector,
then also
('getdeclaredconstructorpriv',)
66.67%(4/6)
if ('callsubsetfromsystemclass', 'getdeclaredconstructorpriv', 'getdeclaredfieldpriv', 'restrictedsetaccessible') is contained in vector,
then also
('loadarbitraryclassescallerpriv',)
100.00%(4/4)
if ('loadarbitraryclassescallerpriv', 'getdeclaredconstructorpriv', 'getdeclaredfieldpriv', 'restrictedsetaccessible') is contained in vector,
then also
('callsubsetfromsystemclass',)
100.00%(4/4)
if ('callstaticfromsystemclass', 'loadarbitraryclassescallerpriv', 'lookupcd', 'getdeclaredfieldaccess') is contained in vector,
then also
('restricteddefinepriv',)
100.00%(7/7)
if ('callstaticfromsystemclass', 'loadarbitraryclassescallerpriv', 'lookupcd', 'restricteddefinepriv') is contained in vector,
then also
('getdeclaredfieldaccess',)
70.00%(7/10)
if ('callstaticfromsystemclass', 'loadarbitraryclassescallerpriv', 'getdeclaredfieldaccess', 'restricteddefinepriv') is contained in vector,
then also
('lookupcd',)
100.00%(7/7)
if ('callstaticfromsystemclass', 'lookupcd', 'getdeclaredfieldaccess', 'restricteddefinepriv') is contained in vector,
then also
('loadarbitraryclassescallerpriv',)
100.00%(7/7)
if ('loadarbitraryclassescallerpriv', 'lookupcd', 'getdeclaredfieldaccess', 'restricteddefinepriv') is contained in vector,
then also
('callstaticfromsystemclass',)
100.00%(7/7)
if ('loadarbitraryclasses', 'accesspublicmethod', 'restrictedgetfields', 'getpublicconstructor') is contained in vector,
then also
('restrictedsetaccessible',)
100.00%(3/3)
if ('loadarbitraryclasses', 'accesspublicmethod', 'restrictedgetfields', 'restrictedsetaccessible') is contained in vector,
then also
('getpublicconstructor',)
100.00%(3/3)
if ('loadarbitraryclasses', 'accesspublicmethod', 'getpublicconstructor', 'restrictedsetaccessible') is contained in vector,
then also
('restrictedgetfields',)
100.00%(3/3)
if ('loadarbitraryclasses', 'restrictedgetfields', 'getpublicconstructor', 'restrictedsetaccessible') is contained in vector,
then also
('accesspublicmethod',)
100.00%(3/3)
if ('accesspublicmethod', 'restrictedgetfields', 'getpublicconstructor', 'restrictedsetaccessible') is contained in vector,
then also
('loadarbitraryclasses',)
100.00%(3/3)
Title:CVE-2003-1301
Number:1
Final goal:Denial of service
Implemented primitives:
1:Unlimited nesting of Object arrays (attacker).

Title:CVE-2006-2426
Number:2
Final goal:Denial of service
Implemented primitives:
1:Create very large file (attacker).

Title:CVE-2008-5353
Number:3
Final goal:Full bypass
Implemented primitives:
1:Define class in a privileged context (attacker).

Title:CVE-2010-0094
Number:4
Final goal:Full bypass
Implemented primitives:
1:Define class in a privileged context (attacker).

Title:CVE-2010-0840
Number:5
Final goal:Full bypass
Implemented primitives:
1:Call arbitrary method in trusted method chain (attacker).

Title:CVE-2011-3544
Number:6
Final goal:Full bypass
Implemented primitives:
1:Call arbitrary method in trusted method chain (attacker).

Title:CVE-2012-1726
Number:7
Final goal:Full bypass
Implemented primitives:
1:Access to MethodHandle of constructor of private inner class (attacker).
2:Private PrivilegedAction that provides access to arbitrary no-argument methods and sets them accessible (helper).
3:Get access to declared field of a class and set it accessible (attacker).
4:Get access to declared method of a class and set it accessible (attacker).
5:Set of restricted classes that define a user-provided class in a privileged context (helper).

Title:CVE-2012-5072a
Number:8
Final goal:Information disclosure
Implemented primitives:
1:Access to system properties (attacker).

Title:CVE-2012-5072b
Number:9
Final goal:Information disclosure
Implemented primitives:
1:Access to system properties (attacker).

Title:CVE-2012-5088a
Number:10
Final goal:Full bypass
Implemented primitives:
1:Use system class to call arbitrary MethodHandles (attacker).
2:Load arbitrary classes if caller is privileged (helper).
3:Lookup MethodHandle (helper).
4:Set of restricted classes that define a user-provided class in a privileged context (helper).

Title:CVE-2012-5088b
Number:11
Final goal:Full bypass
Implemented primitives:
1:Use system class to call arbitrary MethodHandles (attacker).
2:Load arbitrary classes if caller is privileged (helper).
3:Lookup MethodHandle (helper).
4:Get access to declared methods of a class if caller is privileged (helper).
5:Set of restricted classes that define a user-provided class in a privileged context (helper).

Title:CVE-2013-0422
Number:12
Final goal:Full bypass
Implemented primitives:
1:Load arbitrary classes (attacker).
2:Lookup MethodHandle (helper).
3:Set of restricted classes that define a user-provided class in a privileged context (helper).

Title:CVE-2013-0431
Number:13
Final goal:Full bypass
Implemented primitives:
1:Load arbitrary classes (attacker).
2:Use a system class to call a subset of methods (attacker).
3:Get access to declared methods of a class if caller is privileged (helper).
4:Set of restricted classes that define a user-provided class in a privileged context (helper).

Title:CVE-2013-1488
Number:14
Final goal:Full bypass
Implemented primitives:
1:Call arbitrary method in trusted method chain (attacker).

Title:CVE-2013-2423
Number:15
Final goal:Full bypass
Implemented primitives:
1:Restricted field manipulation (attacker).

Title:CVE-2013-2436
Number:16
Final goal:Full bypass
Implemented primitives:
1:Access to MethodHandles for arbitrary protected methods (attacker).

Title:CVE-2013-2460
Number:17
Final goal:Full bypass
Implemented primitives:
1:Use system class to call arbitrary static methods (attacker).
2:Load arbitrary classes if caller is privileged (helper).
3:Use confused deputy to lookup MethodHandle (helper).
4:Set of restricted classes that define a user-provided class in a privileged context (helper).

Title:CVE-2013-2465
Number:18
Final goal:Full bypass
Implemented primitives:
1:Restricted field manipulation (attacker).

Title:NO-CVE-6-ibm
Number:19
Final goal:Full bypass
Implemented primitives:
1:Call arbitrary method in privileged context (attacker).

Title:NO-CVE-8-ibm
Number:20
Final goal:Full bypass
Implemented primitives:
1:Use a system class to call a subset of methods (attacker).
2:Load arbitrary classes if caller is privileged (helper).
3:Get access to declared constructors of a class if caller is privileged (helper).
4:Get access to declared field of a class if caller is privileged (helper).
5:Set of restricted classes that set a specified field accessible (helper).

Title:NO-CVE-11-ibm
Number:21
Final goal:Full bypass
Implemented primitives:
1:Get access to declared method of a class (attacker).
2:Set arbitrary members accessible (attacker).

Title:CVE-2012-5076
Number:22
Final goal:Full bypass
Implemented primitives:
1:Instantiate arbitrary objects (attacker).
2:Get access to declared method of a class (attacker).
3:Set of restricted classes that define a user-provided class in a privileged context (helper).

Title:CVE-2012-5076a1
Number:23
Final goal:Full bypass
Implemented primitives:
1:Use system class to call arbitrary static methods (attacker).
2:Load arbitrary classes if caller is privileged (helper).
3:Use confused deputy to lookup MethodHandle (helper).
4:Get access to declared field of a class and set it accessible (attacker).
5:Set of restricted classes that define a user-provided class in a privileged context (helper).

Title:CVE-2012-5076a2
Number:24
Final goal:Full bypass
Implemented primitives:
1:Lookup MethodHandle (helper).
2:Use system class to call arbitrary MethodHandles (attacker).
3:Load arbitrary classes if caller is privileged (helper).
4:Use system class to call arbitrary static methods (attacker).
5:Use confused deputy to lookup MethodHandle (helper).
6:Set of restricted classes that define a user-provided class in a privileged context (helper).

Title:CVE-2012-5076b
Number:25
Final goal:Full bypass
Implemented primitives:
1:Use system class to call arbitrary static methods (attacker).
2:Load arbitrary classes if caller is privileged (helper).
3:Use confused deputy to lookup MethodHandle (helper).
4:Get access to declared field of a class and set it accessible (attacker).
5:Set of restricted classes that define a user-provided class in a privileged context (helper).

Title:CVE-2012-5076c
Number:26
Final goal:Full bypass
Implemented primitives:
1:Use system class to call arbitrary static methods (attacker).
2:Load arbitrary classes if caller is privileged (helper).
3:Use confused deputy to lookup MethodHandle (helper).
4:Get access to declared field of a class and set it accessible (attacker).
5:Set of restricted classes that define a user-provided class in a privileged context (helper).

Title:CVE-2012-5076d
Number:27
Final goal:Full bypass
Implemented primitives:
1:Use system class to call arbitrary static methods (attacker).
2:Load arbitrary classes if caller is privileged (helper).
3:Use confused deputy to lookup MethodHandle (helper).
4:Get access to declared field of a class and set it accessible (attacker).
5:Set of restricted classes that define a user-provided class in a privileged context (helper).

Title:CVE-2012-5076e
Number:28
Final goal:Full bypass
Implemented primitives:
1:Use system class to call arbitrary static methods (attacker).
2:Load arbitrary classes if caller is privileged (helper).
3:Use confused deputy to lookup MethodHandle (helper).
4:Get access to declared field of a class and set it accessible (attacker).
5:Set of restricted classes that define a user-provided class in a privileged context (helper).

Title:CVE-2012-5076f
Number:29
Final goal:Full bypass
Implemented primitives:
1:Use system class to call arbitrary static methods (attacker).
2:Load arbitrary classes if caller is privileged (helper).
3:Use confused deputy to lookup MethodHandle (helper).
4:Get access to declared field of a class and set it accessible (attacker).
5:Set of restricted classes that define a user-provided class in a privileged context (helper).

Title:CVE-2012-5076g
Number:30
Final goal:Full bypass
Implemented primitives:
1:Use system class to call arbitrary static methods (attacker).
2:Load arbitrary classes if caller is privileged (helper).
3:Use confused deputy to lookup MethodHandle (helper).
4:Get access to declared field of a class and set it accessible (attacker).
5:Set of restricted classes that define a user-provided class in a privileged context (helper).

Title:MULTI-CVE-2012-0547-2012-1726
Number:31
Final goal:Full bypass
Implemented primitives:
1:Get access to declared field of a class and set it accessible (attacker).
2:Lookup MethodHandle (helper).
3:Set of restricted classes that define a user-provided class in a privileged context (helper).

Title:MULTI-CVE-2012-1682-2012-5076
Number:32
Final goal:Full bypass
Implemented primitives:
1:Use system class to call arbitrary methods (attacker).
2:Load arbitrary classes if caller is privileged (helper).
3:Set of restricted classes that define a user-provided class in a privileged context (helper).

Title:MULTI-CVE-2012-4681-2012-5074
Number:33
Final goal:Full bypass
Implemented primitives:
1:Load arbitrary classes (attacker).
2:Get access to declared method of a class (attacker).
3:Get access to declared method of a class and set it accessible (attacker).
4:Get access to declared field of a class and set it accessible (attacker).
5:Set of restricted classes that define a user-provided class in a privileged context (helper).

Title:CVE-2012-0507
Number:34
Final goal:Full bypass
Implemented primitives:
1:Define class in a privileged context (attacker).

Title:CVE-2012-4681
Number:35
Final goal:Full bypass
Implemented primitives:
1:Load arbitrary classes (attacker).
2:Call arbitrary public methods (attacker).
3:Get access to declared field of a class and set it accessible (attacker).

Title:CVE-2013-1475
Number:36
Final goal:Full bypass
Implemented primitives:
1:Restricted field manipulation (attacker).

Title:CVE-2013-1489
Number:37
Final goal:Full bypass
Implemented primitives:
1:Load restricted class (attacker).
2:Use a system class to call a subset of methods (attacker).
3:Get access to declared methods of a class if caller is privileged (helper).
4:Set of restricted classes that define a user-provided class in a privileged context (helper).

Title:MULTI-CVE-2012-1682-2012-1726
Number:38
Final goal:Full bypass
Implemented primitives:
1:Use system class to call arbitrary methods (attacker).
2:Load arbitrary classes if caller is privileged (helper).
3:Lookup MethodHandle (helper).
4:Get access to declared field of a class and set it accessible (attacker).
5:Set of restricted classes that define a user-provided class in a privileged context (helper).

Title:MULTI-CVE-2012-5075-2012-4681
Number:39
Final goal:Full bypass
Implemented primitives:
1:Load restricted class (attacker).
2:Access to arbitrary public method (attacker).
3:Get access to declared field of a class and set it accessible (attacker).
4:Get access to declared method of a class and set it accessible (attacker).
5:Set of restricted classes that define a user-provided class in a privileged context (helper).

Title:MULTI-CVE-2012-5075-2012-5071
Number:40
Final goal:Information disclosure
Implemented primitives:
1:Instantiate a subset of restricted classes (attacker).

Title:MULTI-CVE-2012-5076-2012-5088
Number:41
Final goal:Full bypass
Implemented primitives:
1:Lookup MethodHandle (helper).
2:Use system class to call arbitrary MethodHandles (attacker).
3:Load arbitrary classes if caller is privileged (helper).
4:Use system class to call arbitrary static methods (attacker).
5:Use confused deputy to lookup MethodHandle (helper).
6:Set of restricted classes that define a user-provided class in a privileged context (helper).

Title:NO-CVE-10-ibm
Number:42
Final goal:Full bypass
Implemented primitives:
1:Use a system class to call a subset of methods (attacker).
2:Load arbitrary classes if caller is privileged (helper).
3:Get access to declared constructors of a class if caller is privileged (helper).
4:Get access to declared field of a class if caller is privileged (helper).
5:Set of restricted classes that set a specified field accessible (helper).

Title:NO-CVE-12-ibm
Number:43
Final goal:Full bypass
Implemented primitives:
1:Load arbitrary classes (attacker).
2:Access to arbitrary public method (attacker).
3:Set of restricted classes that provide access to declared fields of non-restricted classes (helper).
4:Get access to public constructors of a class (attacker).
5:Set of restricted classes that set a specified field accessible (helper).

Title:NO-CVE-13-ibm
Number:44
Final goal:Full bypass
Implemented primitives:
1:Load arbitrary classes (attacker).
2:Access to arbitrary public method (attacker).
3:Set of restricted classes that provide access to declared fields of non-restricted classes (helper).
4:Get access to public constructors of a class (attacker).
5:Set of restricted classes that set a specified field accessible (helper).

Title:NO-CVE-14-ibm
Number:45
Final goal:Full bypass
Implemented primitives:
1:Load arbitrary classes (attacker).
2:Access to arbitrary public method (attacker).
3:Set of restricted classes that provide access to declared fields of non-restricted classes (helper).
4:Get access to public constructors of a class (attacker).
5:Set of restricted classes that set a specified field accessible (helper).

Title:NO-CVE-15-ibm
Number:46
Final goal:Full bypass
Implemented primitives:
1:Define class in a privileged context (attacker).

Title:NO-CVE-18-ibm
Number:47
Final goal:Full bypass
Implemented primitives:
1:Use a system class to call a subset of methods (attacker).
2:Load arbitrary classes if caller is privileged (helper).
3:Use confused deputy to lookup MethodHandle (helper).
4:Get access to declared field of a class if caller is privileged (helper).
5:Set of restricted classes that set a specified field accessible (helper).

Title:NO-CVE-19-ibm
Number:48
Final goal:Full bypass
Implemented primitives:
1:Use a system class to call a subset of methods (attacker).
2:Load arbitrary classes if caller is privileged (helper).
3:Get access to declared constructors of a class if caller is privileged (helper).
4:Get access to declared field of a class if caller is privileged (helper).
5:Set of restricted classes that set a specified field accessible (helper).

Title:NO-CVE-20-ibm
Number:49
Final goal:Full bypass
Implemented primitives:
1:Use a system class to call a subset of methods (attacker).
2:Load arbitrary classes if caller is privileged (helper).
3:Use confused deputy to lookup MethodHandle (helper).
4:Get access to declared field of a class if caller is privileged (helper).
5:Set of restricted classes that set a specified field accessible (helper).

Title:NO-CVE-21-ibm
Number:50
Final goal:Full bypass
Implemented primitives:
1:Define class in a privileged context (attacker).

Title:NO-CVE-22-ibm
Number:51
Final goal:Full bypass
Implemented primitives:
1:Access to MethodHandles for arbitrary protected methods (attacker).

Title:NO-CVE-24-ibm
Number:52
Final goal:Full bypass
Implemented primitives:
1:Read and write value of an arbitrary non-static field (attacker).

Title:NO-CVE-25-ibm
Number:53
Final goal:Full bypass
Implemented primitives:
1:Call arbitrary method in privileged context (attacker).

Title:NO-CVE-26-ibm
Number:54
Final goal:Full bypass
Implemented primitives:
1:Get access to declared, non-static fields of a serializable class and set them accessible (attacker).

Title:NO-CVE-27
Number:55
Final goal:Full bypass
Implemented primitives:
1:Lookup MethodHandle (helper).
2:Restricted field manipulation (attacker).

Title:NO-CVE-28-ibm
Number:56
Final goal:Full bypass
Implemented primitives:
1:Define class in a privileged context (attacker).

Title:NO-CVE-29-ibm
Number:57
Final goal:Full bypass
Implemented primitives:
1:Define class in a privileged context (attacker).

Title:NO-CVE-30-ibm
Number:58
Final goal:Full bypass
Implemented primitives:
1:Call arbitrary instance method in privileged context (attacker).

Title:NO-CVE-7-ibm
Number:59
Final goal:Full bypass
Implemented primitives:
1:Call arbitrary method in privileged context (attacker).

Title:NO-CVE-9-ibm
Number:60
Final goal:Full bypass
Implemented primitives:
1:Use a system class to call a subset of methods (attacker).
2:Load arbitrary classes if caller is privileged (helper).
3:Get access to declared constructors of a class if caller is privileged (helper).
4:Get access to declared field of a class if caller is privileged (helper).
5:Set of restricted classes that set a specified field accessible (helper).

Title:NO-CVE-3
Number:61
Final goal:Full bypass
Implemented primitives:
1:Restricted field manipulation (attacker).


File created: 2016-10-21 14:48:23.979520 -- home