PT-2015-4111 · Ibm+2 · Ibm Sdk+2

Published 2015-02-05 · Updated 2019-07-16 · CVE-2014-8892

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM SDK, Java Technology Edition versions 5.0 before SR16-FP9 IBM SDK, Java Technology Edition versions 6 before SR16-FP3 IBM SDK, Java Technology Edition versions 6R1 before SR8-FP3 IBM SDK, Java Technology Edition versions 7 before SR8-FP10 IBM SDK, Java Technology Edition versions 7R1 before SR2-FP10

Description The issue allows remote attackers to bypass intended access permissions and obtain sensitive information via unspecified vectors related to the security manager.

Recommendations For IBM SDK, Java Technology Edition version 5.0, update to SR16-FP9 or later. For IBM SDK, Java Technology Edition version 6, update to SR16-FP3 or later. For IBM SDK, Java Technology Edition version 6R1, update to SR8-FP3 or later. For IBM SDK, Java Technology Edition version 7, update to SR8-FP10 or later. For IBM SDK, Java Technology Edition version 7R1, update to SR2-FP10 or later.

Fix

Related Identifiers

CVE-2014-8892

RHSA-2015:0133

RHSA-2015:0134

RHSA-2015:0135

RHSA-2015:0136

RHSA-2015:0263

RHSA-2015:0264

RHSA-2015_0133

RHSA-2015_0135

RHSA-2015_0136

SUSE-SU-2015:0304-1

SUSE-SU-2015:0306-1

Affected Products

Ibm Sdk

Red Hat

Suse

References · 42

• http://rhn.redhat.com/errata/RHSA-2015-0264.html · Vendor Advisory
• https://www-304.ibm.com/support/docview.wss?uid=swg21695474 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-10291 · Security Note
• http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00022.html · Vendor Advisory
• http://ibm.com/developerworks/java/jdk/alerts/#IBM_Security_Update_February_2015 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00027.html · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00036.html · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2015:0306-1 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00026.html · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2015-0136.html · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00025.html · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00021.html · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00013.html · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00033.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2014-8892 · Security Note