PT-2015-4111 · Ibm+2 · Ibm Sdk+2

Publicado 2015-02-05 · Atualizado 2019-07-16 · CVE-2014-8892

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM SDK, Java Technology Edition versions 5.0 before SR16-FP9 IBM SDK, Java Technology Edition versions 6 before SR16-FP3 IBM SDK, Java Technology Edition versions 6R1 before SR8-FP3 IBM SDK, Java Technology Edition versions 7 before SR8-FP10 IBM SDK, Java Technology Edition versions 7R1 before SR2-FP10

Description The issue allows remote attackers to bypass intended access permissions and obtain sensitive information via unspecified vectors related to the security manager.

Recommendations For IBM SDK, Java Technology Edition version 5.0, update to SR16-FP9 or later. For IBM SDK, Java Technology Edition version 6, update to SR16-FP3 or later. For IBM SDK, Java Technology Edition version 6R1, update to SR8-FP3 or later. For IBM SDK, Java Technology Edition version 7, update to SR8-FP10 or later. For IBM SDK, Java Technology Edition version 7R1, update to SR2-FP10 or later.

Correção

Identificadores relacionados

CVE-2014-8892

RHSA-2015:0133

RHSA-2015:0134

RHSA-2015:0135

RHSA-2015:0136

RHSA-2015:0263

RHSA-2015:0264

RHSA-2015_0133

RHSA-2015_0135

RHSA-2015_0136

SUSE-SU-2015:0304-1

SUSE-SU-2015:0306-1

Produtos afetados

Ibm Sdk

Red Hat

Suse

Referências · 42

• https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/server/jsse_skiptls_mitm_proxy.rb · Nota
• https://bugzilla.suse.com/916266 · Nota
• https://suse.com/security/cve/CVE-2014-8892 · Nota
• https://access.redhat.com/security/cve/CVE-2014-6593 · Nota
• https://suse.com/support/update/announcement/2015/suse-su-20150306-1 · Nota
• http://rhn.redhat.com/errata/RHSA-2015-0264.html · Aviso do Fabricante
• https://access.redhat.com/errata/RHSA-2015:0133 · Nota
• https://www-304.ibm.com/support/docview.wss?uid=swg21695474 · Aviso do Fabricante
• https://access.redhat.com/security/cve/CVE-2015-0408 · Nota
• https://suse.com/support/update/announcement/2015/suse-su-20150304-1 · Nota
• https://access.redhat.com/security/cve/CVE-2014-6591 · Nota
• https://bdu.fstec.ru/vul/2015-10291 · Nota de Segurança
• http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00022.html · Aviso do Fabricante
• https://access.redhat.com/security/cve/CVE-2015-0406 · Nota
• http://ibm.com/developerworks/java/jdk/alerts/#IBM_Security_Update_February_2015 · Aviso do Fabricante