CVE-2012-4820 Unspecified vulnerability in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 SR14 and earlier, and Java 142 SR13 FP13 and earlier; as used....
HighCVSS 9.3
EPSS 5.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unspecified vulnerability in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 SR14 and earlier, and Java 142 SR13 FP13 and earlier; as used in IBM Rational Host On-Demand, Rational Change, Tivoli Monitoring, Smart Analytics System 5600, Tivoli Remote Control 5.1.2, WebSphere Real Time, Lotus Notes & Domino, Tivoli Storage Productivity Center, and Service Deliver Manager; and other products from other vendors such as Red Hat, when running under a security manager, allows remote attackers to gain privileges by modifying or removing the security manager via vectors related to "insecure use of the java.lang.reflect.Method invoke() method."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm java | >= 1.4.2, <= 1.4.2.13.13 | No fix listed |
| ibm java | >= 5.0.0.0, <= 5.0.14.0 | No fix listed |
| ibm java | >= 6.0.0.0, <= 6.0.11.0 | No fix listed |
| ibm java | >= 7.0.0.0, <= 7.0.2.0 | No fix listed |
| ibm lotus domino | = 8.0 | No fix listed |
| ibm lotus domino | = 8.0.1 | No fix listed |
| ibm lotus domino | = 8.0.2 | No fix listed |
| ibm lotus domino | = 8.0.2.1 | No fix listed |
| ibm lotus domino | = 8.0.2.2 | No fix listed |
| ibm lotus domino | = 8.0.2.3 | No fix listed |
| ibm lotus domino | = 8.0.2.4 | No fix listed |
| ibm lotus domino | = 8.5.0 | No fix listed |
| ibm lotus domino | = 8.5.0.1 | No fix listed |
| ibm lotus domino | = 8.5.1 | No fix listed |
| ibm lotus domino | = 8.5.1.1 | No fix listed |
| ibm lotus domino | = 8.5.1.2 | No fix listed |
| ibm lotus domino | = 8.5.1.3 | No fix listed |
| ibm lotus domino | = 8.5.1.4 | No fix listed |
| ibm lotus domino | = 8.5.1.5 | No fix listed |
| ibm lotus domino | = 8.5.2.0 | No fix listed |
| ibm lotus domino | = 8.5.2.1 | No fix listed |
| ibm lotus domino | = 8.5.2.2 | No fix listed |
| ibm lotus domino | = 8.5.2.3 | No fix listed |
| ibm lotus domino | = 8.5.2.4 | No fix listed |
| ibm lotus domino | = 8.5.3.0 | No fix listed |
Show 103 more
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm lotus domino | = 8.5.3.1 | No fix listed |
| ibm lotus domino | = 8.5.3.2 | No fix listed |
| ibm lotus notes | = 8.0 | No fix listed |
| ibm lotus notes | = 8.0.0 | No fix listed |
| ibm lotus notes | = 8.0.1 | No fix listed |
| ibm lotus notes | = 8.0.2 | No fix listed |
| ibm lotus notes | = 8.0.2.0 | No fix listed |
| ibm lotus notes | = 8.0.2.1 | No fix listed |
| ibm lotus notes | = 8.0.2.2 | No fix listed |
| ibm lotus notes | = 8.0.2.3 | No fix listed |
| ibm lotus notes | = 8.0.2.4 | No fix listed |
| ibm lotus notes | = 8.0.2.5 | No fix listed |
| ibm lotus notes | = 8.0.2.6 | No fix listed |
| ibm lotus notes | = 8.5 | No fix listed |
| ibm lotus notes | = 8.5.0.0 | No fix listed |
| ibm lotus notes | = 8.5.0.1 | No fix listed |
| ibm lotus notes | = 8.5.1 | No fix listed |
| ibm lotus notes | = 8.5.1.0 | No fix listed |
| ibm lotus notes | = 8.5.1.1 | No fix listed |
| ibm lotus notes | = 8.5.1.2 | No fix listed |
| ibm lotus notes | = 8.5.1.3 | No fix listed |
| ibm lotus notes | = 8.5.1.4 | No fix listed |
| ibm lotus notes | = 8.5.1.5 | No fix listed |
| ibm lotus notes | = 8.5.2.0 | No fix listed |
| ibm lotus notes | = 8.5.2.1 | No fix listed |
| ibm lotus notes | = 8.5.2.2 | No fix listed |
| ibm lotus notes | = 8.5.2.3 | No fix listed |
| ibm lotus notes | = 8.5.3 | No fix listed |
| ibm lotus notes | = 8.5.3.1 | No fix listed |
| ibm lotus notes | = 8.5.3.2 | No fix listed |
| ibm lotus notes | = 8.5.4 | No fix listed |
| ibm lotus notes sametime | = 8.0.80407 | No fix listed |
| ibm lotus notes sametime | = 8.0.80822 | No fix listed |
| ibm lotus notes sametime | = 8.5.1.20100709-1631 | No fix listed |
| ibm lotus notes traveler | = 8.0 | No fix listed |
| ibm lotus notes traveler | = 8.0.1 | No fix listed |
| ibm lotus notes traveler | = 8.0.1.2 | No fix listed |
| ibm lotus notes traveler | = 8.0.1.3 | No fix listed |
| ibm lotus notes traveler | = 8.5.0.0 | No fix listed |
| ibm lotus notes traveler | = 8.5.0.1 | No fix listed |
| ibm lotus notes traveler | = 8.5.0.2 | No fix listed |
| ibm lotus notes traveler | = 8.5.1.1 | No fix listed |
| ibm lotus notes traveler | = 8.5.1.2 | No fix listed |
| ibm lotus notes traveler | = 8.5.1.3 | No fix listed |
| ibm lotus notes traveler | = 8.5.2.1 | No fix listed |
| ibm lotus notes traveler | = 8.5.3 | No fix listed |
| ibm lotus notes traveler | = 8.5.3.1 | No fix listed |
| ibm lotus notes traveler | = 8.5.3.2 | No fix listed |
| ibm lotus notes traveler | = 8.5.3.3 | No fix listed |
| ibm lotus notes traveler | = 8.5.3.3-interim_fix_1 | No fix listed |
| ibm rational change | = 4.7 | No fix listed |
| ibm rational change | = 5.1 | No fix listed |
| ibm rational change | = 5.2 | No fix listed |
| ibm rational change | = 5.3 | No fix listed |
| ibm rational host on-demand | = 1.6.0.12 | No fix listed |
| ibm rational host on-demand | = 8.0.8.0 | No fix listed |
| ibm rational host on-demand | = 9.0.8.0 | No fix listed |
| ibm rational host on-demand | = 10.0.9.0 | No fix listed |
| ibm rational host on-demand | = 10.0.10.0 | No fix listed |
| ibm rational host on-demand | = 11.0.3.0 | No fix listed |
| ibm rational host on-demand | = 11.0.4.0 | No fix listed |
| ibm rational host on-demand | = 11.0.5.0 | No fix listed |
| ibm rational host on-demand | = 11.0.5.1 | No fix listed |
| ibm rational host on-demand | = 11.0.6.0 | No fix listed |
| ibm rational host on-demand | = 11.0.6.1 | No fix listed |
| ibm service delivery manager | = 7.2.1.0 | No fix listed |
| ibm service delivery manager | = 7.2.2.0 | No fix listed |
| ibm smart analytics system 5600 software | All versions | No fix listed |
| ibm smart analytics system 5600 software | = 9.7 | No fix listed |
| ibm tivoli monitoring | = 6.1.0 | No fix listed |
| ibm tivoli monitoring | = 6.1.0.7 | No fix listed |
| ibm tivoli monitoring | = 6.2.0 | No fix listed |
| ibm tivoli monitoring | = 6.2.0.1 | No fix listed |
| ibm tivoli monitoring | = 6.2.0.2 | No fix listed |
| ibm tivoli monitoring | = 6.2.0.3 | No fix listed |
| ibm tivoli monitoring | = 6.2.1 | No fix listed |
| ibm tivoli monitoring | = 6.2.1.0 | No fix listed |
| ibm tivoli monitoring | = 6.2.1.1 | No fix listed |
| ibm tivoli monitoring | = 6.2.1.2 | No fix listed |
| ibm tivoli monitoring | = 6.2.1.3 | No fix listed |
| ibm tivoli monitoring | = 6.2.1.4 | No fix listed |
| ibm tivoli monitoring | = 6.2.2 | No fix listed |
| ibm tivoli monitoring | = 6.2.2.0 | No fix listed |
| ibm tivoli monitoring | = 6.2.2.1 | No fix listed |
| ibm tivoli monitoring | = 6.2.2.2 | No fix listed |
| ibm tivoli monitoring | = 6.2.2.3 | No fix listed |
| ibm tivoli monitoring | = 6.2.2.4 | No fix listed |
| ibm tivoli monitoring | = 6.2.2.5 | No fix listed |
| ibm tivoli monitoring | = 6.2.2.6 | No fix listed |
| ibm tivoli monitoring | = 6.2.2.7 | No fix listed |
| ibm tivoli monitoring | = 6.2.2.8 | No fix listed |
| ibm tivoli monitoring | = 6.2.2.9 | No fix listed |
| ibm tivoli monitoring | = 6.2.3 | No fix listed |
| ibm tivoli monitoring | = 6.2.3.0 | No fix listed |
| ibm tivoli monitoring | = 6.2.3.1 | No fix listed |
| ibm tivoli monitoring | = 6.2.3.2 | No fix listed |
| ibm tivoli remote control | = 5.1.2 | No fix listed |
| ibm websphere real time | = 2.0 | No fix listed |
| ibm websphere real time | = 3.0 | No fix listed |
| tivoli storage productivity center 5.0 | All versions | No fix listed |
| tivoli storage productivity center 5.1 | All versions | No fix listed |
| tivoli storage productivity center 5.1.1 | All versions | No fix listed |
| ibm smart analytics system 5600 | = 7200 | No fix listed |
References
- RHSA-2012:1465 third-party-advisory vendor-advisory
- RHSA-2012:1466 third-party-advisory vendor-advisory
- RHSA-2012:1467 third-party-advisory vendor-advisory
- RHSA-2013:1455 third-party-advisory vendor-advisory
- RHSA-2013:1456 third-party-advisory vendor-advisory
- 20120911 [SE-2012-01] Security vulnerabilities in IBM Java mailing-list third-party-advisory
- 51326 third-party-advisory
- 51327 third-party-advisory
- 51328 third-party-advisory
- 51393 third-party-advisory
- 51634 third-party-advisory
- IV29654 vendor-advisory
- www-01.ibm.com vendor-advisory
- www-01.ibm.com vendor-advisory
- www-01.ibm.com vendor-advisory
- www-01.ibm.com vendor-advisory
- www-01.ibm.com vendor-advisory
- www-01.ibm.com vendor-advisory
- www-01.ibm.com vendor-advisory
- www-01.ibm.com vendor-advisory
- www-01.ibm.com vendor-advisory
- www-01.ibm.com vendor-advisory
- 55495 third-party-advisory vdb-entry
- ibm-java-invoke-code-execution(78764) third-party-advisory vdb-entry
- www-304.ibm.com vendor-advisory