Vulnerability in IBM Java
CVE-2012-4820
Unspecified vulnerability in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 SR14 and earlier, and Java 142 SR13 FP13 and earlier; as used in IBM Rational Host On-Demand, Rational Change, Tivoli Monitoring, Smart Analytics System 5600, Tivoli Remote Control 5.1.2, WebSphere Real Time, Lotus Notes & Domino, Tivoli Storage Productivity Center, and Service Deliver Manager; and other products from other vendors such as Red Hat, when running under a security manager, allows remote attackers to gain privileges by modifying or removing the security manager via vectors related to "insecure use of the java.lang.reflect.Method invoke() method."
EPSS: 0.051 (91.9th percentile) — read the EPSS interpretation.
Affected products
- Ibm Java
- Ibm Lotus_domino — versions 8.0, 8.0.1, 8.0.2
- Ibm Lotus_notes — versions 8.0, 8.0.0, 8.0.1
- Ibm Lotus_notes_sametime — versions 8.0.80407, 8.0.80822, 8.5.1.20100709-1631
- Ibm Lotus_notes_traveler — versions 8.0, 8.0.1, 8.0.1.2
- Ibm Rational_change — versions 4.7, 5.1, 5.2
- Ibm Rational_host_on-demand — versions 1.6.0.12, 8.0.8.0, 9.0.8.0
- Ibm Service_delivery_manager — versions 7.2.1.0, 7.2.2.0
- Ibm Smart_analytics_system_5600 — versions 7200
- Ibm Smart_analytics_system_5600_software — versions 9.7
References
- psirt@us.ibm.com (x_refsource_REDHAT, vendor-advisory, Third Party Advisory)
- psirt@us.ibm.com (x_refsource_CONFIRM, Vendor Advisory)
- psirt@us.ibm.com (x_refsource_CONFIRM, Vendor Advisory)
- psirt@us.ibm.com (x_refsource_CONFIRM, Vendor Advisory)
- psirt@us.ibm.com (x_refsource_CONFIRM, Vendor Advisory)
- psirt@us.ibm.com (mailing-list, x_refsource_BUGTRAQ, Mailing List, Third Party Advisory)
- psirt@us.ibm.com (x_refsource_CONFIRM, Vendor Advisory)
- psirt@us.ibm.com (x_refsource_REDHAT, vendor-advisory, Third Party Advisory)
- psirt@us.ibm.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
- psirt@us.ibm.com (x_refsource_CONFIRM, Vendor Advisory)