PT-2013-1719 · Ibm+1 · Ibm Websphere Real Time+10

Adam Gowdiak · Published 2012-11-15 · Updated 2019-07-18 · CVE-2012-4821

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions IBM Java versions 7 SR2 and earlier IBM Java versions 6.0.1 SR3 and earlier IBM Java versions 6 SR11 and earlier IBM Java versions 5 SR14 and earlier IBM Java 142 SR13 FP13 and earlier IBM Rational Host On-Demand (affected versions not specified) IBM Rational Change (affected versions not specified) IBM Tivoli Monitoring (affected versions not specified) IBM Smart Analytics System 5600 (affected versions not specified) IBM Tivoli Remote Control 5.1.2 IBM WebSphere Real Time (affected versions not specified) IBM Lotus Notes & Domino (affected versions not specified) IBM Tivoli Storage Productivity Center (affected versions not specified) IBM Service Deliver Manager (affected versions not specified)

Description The issue allows remote attackers to execute arbitrary code via insecure use of the java.lang.Class getDeclaredMethods or nd and java.lang.reflect.AccessibleObject setAccessible() methods. This affects various IBM products, including IBM Java, IBM Rational Host On-Demand, IBM Rational Change, IBM Tivoli Monitoring, IBM Smart Analytics System 5600, IBM Tivoli Remote Control, IBM WebSphere Real Time, IBM Lotus Notes & Domino, IBM Tivoli Storage Productivity Center, and IBM Service Deliver Manager.

Recommendations For IBM Java versions 7 SR2 and earlier, update to a version later than 7 SR2. For IBM Java versions 6.0.1 SR3 and earlier, update to a version later than 6.0.1 SR3. For IBM Java versions 6 SR11 and earlier, update to a version later than 6 SR11. For IBM Java versions 5 SR14 and earlier, update to a version later than 5 SR14. For IBM Java 142 SR13 FP13 and earlier, update to a version later than 142 SR13 FP13. For other affected products, apply the recommended updates or patches as provided by the vendor. As a temporary workaround, consider restricting access to the java.lang.Class getDeclaredMethods and java.lang.reflect.AccessibleObject setAccessible() methods until a patch is available.

Exploit

Fix

Related Identifiers

CVE-2012-4821

RHSA-2012:1467

RHSA-2012_1467

Affected Products

Ibm Java

Ibm Lotus Notes & Domino

Ibm Rational Change

Ibm Rational Host On-Demand

Service Deliver Manager

Smart Analytics System 5600

Ibm Tivoli Monitoring

Ibm Tivoli Remote Control

Ibm Tivoli Storage Productivity Center

Ibm Websphere Real Time

Red Hat

References · 59

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/java_jre17_method_handle.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/java_jre17_glassfish_averagerangestatisticimpl.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/java_jre17_jaxws.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/java_ws_double_quote.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/java_rhino.rb · Exploit
• http://www-01.ibm.com/support/docview.wss?uid=swg21621154 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2012-4821 · Security Note
• http://www-01.ibm.com/support/docview.wss?uid=swg21616708 · Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg21616652 · Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg21615800 · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-04098 · Security Note
• https://www-304.ibm.com/support/docview.wss?uid=swg21616546 · Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg21616616 · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2012-1467.html · Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg21615705 · Vendor Advisory