openjdk-11-demo: Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE(component: Security)

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE(component: Security). Supported versions that are affected are Java SE:7u241, 8u231, 11.0.5 and 13.0.1; Java SE Embedded: 8u231. Difficult toexploit vulnerability allows unauthenticated attacker with network accessvia Kerberos to compromise Java SE, Java SE Embedded. While thevulnerability is in Java SE, Java SE Embedded, attacks may significantlyimpact additional products. Successful attacks of this vulnerability canresult in unauthorized access to critical data or complete access to allJava SE, Java SE Embedded accessible data. Note: This vulnerability appliesto Java deployments, typically in clients running sandboxed Java Web Startapplications or sandboxed Java applets (in Java SE 8), that load and rununtrusted code (e.g., code that comes from the internet) and rely on theJava sandbox for security. This vulnerability can also be exploited byusing APIs in the specified Component, e.g., through a web service whichsupplies data to the APIs. CVSS 3.0 Base Score 6.8 (Confidentialityimpacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N).

Where it's fixed