JRE8-WN-000190 - Oracle JRE 8 must remove previous versions when the latest version is installed.

Information

Previous versions of software components that are not removed from the information system after updates have been installed may be exploited by adversaries. Some information technology products may remove older versions of software automatically from the information system.

NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.

Solution

Remove previous versions of JRE.

Open the Windows Control Panel, and navigate to 'Programs and Features'.

Highlight, and click uninstall on all out of date instances of JRE.

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Oracle_JRE_Windows_V2R1_STIG.zip

Item Details

Category: SYSTEM AND INFORMATION INTEGRITY

References: 800-53|SI-2(6), CAT|II, CCI|CCI-002617, Rule-ID|SV-234698r617446_rule, STIG-ID|JRE8-WN-000190, STIG-Legacy|SV-81455, STIG-Legacy|V-66965, Vuln-ID|V-234698

Plugin: Windows

Control ID: 811c98aa8e1c74116d13b3ee20b805a679286072938ee18a63bd509864fbdbb3