PT-2013-1718 · Ibm+1 · Ibm Websphere Real Time+10

Adam Gowdiak · Published 2012-11-15 · Updated 2019-07-18 · CVE-2012-4820

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions IBM Java versions prior to 7 SR2 IBM Java 6.0.1 versions prior to SR3 IBM Java 6 versions prior to SR11 IBM Java 5 versions prior to SR14 IBM Java 142 versions prior to SR13 FP13 IBM Rational Host On-Demand (affected versions not specified) IBM Rational Change (affected versions not specified) IBM Tivoli Monitoring (affected versions not specified) IBM Smart Analytics System 5600 (affected versions not specified) IBM Tivoli Remote Control 5.1.2 (affected versions not specified) IBM WebSphere Real Time (affected versions not specified) IBM Lotus Notes & Domino (affected versions not specified) IBM Tivoli Storage Productivity Center (affected versions not specified) IBM Service Deliver Manager (affected versions not specified)

Description The issue allows remote attackers to gain privileges by modifying or removing the security manager via vectors related to insecure use of the java.lang.reflect.Method invoke() method when running under a security manager.

Recommendations For IBM Java versions prior to 7 SR2, update to a version newer than 7 SR2. For IBM Java 6.0.1 versions prior to SR3, update to a version newer than 6.0.1 SR3. For IBM Java 6 versions prior to SR11, update to a version newer than 6 SR11. For IBM Java 5 versions prior to SR14, update to a version newer than 5 SR14. For IBM Java 142 versions prior to SR13 FP13, update to a version newer than 142 SR13 FP13. For other affected products, apply the recommended updates or patches as provided by the vendors. As a temporary workaround, consider restricting the use of the java.lang.reflect.Method invoke() method until a patch is available.

Exploit

Fix

Related Identifiers

CVE-2012-4820

RHSA-2012:1465

RHSA-2012:1466

RHSA-2012:1467

RHSA-2012:1485

RHSA-2012_1465

RHSA-2012_1466

RHSA-2012_1467

RHSA-2013:1455

RHSA-2013:1456

Affected Products

Ibm Java

Ibm Lotus Notes & Domino

Ibm Rational Change

Ibm Rational Host On-Demand

Service Deliver Manager

Smart Analytics System 5600

Ibm Tivoli Monitoring

Ibm Tivoli Remote Control

Ibm Tivoli Storage Productivity Center

Ibm Websphere Real Time

Red Hat

References · 72

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/java_jre17_glassfish_averagerangestatisticimpl.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/java_jre17_method_handle.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/java_jre17_jaxws.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/java_rhino.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/java_ws_double_quote.rb · Exploit
• http://www-01.ibm.com/support/docview.wss?uid=swg21616652 · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-04098 · Security Note
• https://www-304.ibm.com/support/docview.wss?uid=swg21616546 · Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg21616616 · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2012-1466.html · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2013-1456.html · Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg21616490 · Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg21621154 · Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg21616708 · Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg1IV29654 · Vendor Advisory