Lucene search

IbmCVE-2012-4822

HistoryJan 11, 2013 - 12:55 a.m.

CVE-2012-4822

2013-01-1100:55:01

ibm

web.nvd.nist.gov

cve

2012

4822

ibm

java

jre

vulnerability

remote code execution

security alert

nvd

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

5.3

Confidence

High

EPSS

0.829

Percentile

98.4%

JSON

Multiple unspecified vulnerabilities in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 SR14 and earlier, and Java 142 SR13 FP13 and earlier; as used in IBM Rational Host On-Demand, Rational Change, Tivoli Monitoring, Smart Analytics System 5600, Tivoli Remote Control 5.1.2, WebSphere Real Time, Lotus Notes & Domino, Tivoli Storage Productivity Center, and Service Deliver Manager; and other products from other vendors such as Red Hat, allow remote attackers to execute arbitrary code via vectors related to “insecure use [of] multiple methods in the java.lang.class class.”

Affected configurations

Nvd

Node

ibmjavaRange1.4.2–1.4.2.13.13

ibmjavaRange5.0.0.0–5.0.14.0

ibmjavaRange6.0.0.0–6.0.11.0

ibmjavaRange7.0.0.0–7.0.2.0

ibmlotus_dominoMatch8.0

ibmlotus_dominoMatch8.0.1

ibmlotus_dominoMatch8.0.2

ibmlotus_dominoMatch8.0.2.1

ibmlotus_dominoMatch8.0.2.2

ibmlotus_dominoMatch8.0.2.3

ibmlotus_dominoMatch8.0.2.4

ibmlotus_dominoMatch8.5.0

ibmlotus_dominoMatch8.5.0.1

ibmlotus_dominoMatch8.5.1

ibmlotus_dominoMatch8.5.1.1

ibmlotus_dominoMatch8.5.1.2

ibmlotus_dominoMatch8.5.1.3

ibmlotus_dominoMatch8.5.1.4

ibmlotus_dominoMatch8.5.1.5

ibmlotus_dominoMatch8.5.2.0

ibmlotus_dominoMatch8.5.2.1

ibmlotus_dominoMatch8.5.2.2

ibmlotus_dominoMatch8.5.2.3

ibmlotus_dominoMatch8.5.2.4

ibmlotus_dominoMatch8.5.3.0

ibmlotus_dominoMatch8.5.3.1

ibmlotus_dominoMatch8.5.3.2

ibmlotus_notesMatch8.0

ibmlotus_notesMatch8.0.0

ibmlotus_notesMatch8.0.1

ibmlotus_notesMatch8.0.2

ibmlotus_notesMatch8.0.2.0

ibmlotus_notesMatch8.0.2.1

ibmlotus_notesMatch8.0.2.2

ibmlotus_notesMatch8.0.2.3

ibmlotus_notesMatch8.0.2.4

ibmlotus_notesMatch8.0.2.5

ibmlotus_notesMatch8.0.2.6

ibmlotus_notesMatch8.5

ibmlotus_notesMatch8.5.0.0

ibmlotus_notesMatch8.5.0.1

ibmlotus_notesMatch8.5.1

ibmlotus_notesMatch8.5.1.0

ibmlotus_notesMatch8.5.1.1

ibmlotus_notesMatch8.5.1.2

ibmlotus_notesMatch8.5.1.3

ibmlotus_notesMatch8.5.1.4

ibmlotus_notesMatch8.5.1.5

ibmlotus_notesMatch8.5.2.0

ibmlotus_notesMatch8.5.2.1

ibmlotus_notesMatch8.5.2.2

ibmlotus_notesMatch8.5.2.3

ibmlotus_notesMatch8.5.3

ibmlotus_notesMatch8.5.3.1

ibmlotus_notesMatch8.5.3.2

ibmlotus_notesMatch8.5.4

ibmlotus_notes_sametimeMatch8.0.80407

ibmlotus_notes_sametimeMatch8.0.80822

ibmlotus_notes_sametimeMatch8.5.1.20100709-1631advanced_embedded

ibmlotus_notes_travelerMatch8.0

ibmlotus_notes_travelerMatch8.0.1

ibmlotus_notes_travelerMatch8.0.1.2

ibmlotus_notes_travelerMatch8.0.1.3

ibmlotus_notes_travelerMatch8.5.0.0

ibmlotus_notes_travelerMatch8.5.0.1

ibmlotus_notes_travelerMatch8.5.0.2

ibmlotus_notes_travelerMatch8.5.1.1

ibmlotus_notes_travelerMatch8.5.1.2

ibmlotus_notes_travelerMatch8.5.1.3

ibmlotus_notes_travelerMatch8.5.2.1

ibmlotus_notes_travelerMatch8.5.3

ibmlotus_notes_travelerMatch8.5.3.1

ibmlotus_notes_travelerMatch8.5.3.2

ibmlotus_notes_travelerMatch8.5.3.3

ibmlotus_notes_travelerMatch8.5.3.3interim_fix_1

ibmrational_changeMatch4.7

ibmrational_changeMatch5.1

ibmrational_changeMatch5.2

ibmrational_changeMatch5.3

ibmrational_host_on-demandMatch1.6.0.12

ibmrational_host_on-demandMatch8.0.8.0

ibmrational_host_on-demandMatch9.0.8.0

ibmrational_host_on-demandMatch10.0.9.0

ibmrational_host_on-demandMatch10.0.10.0

ibmrational_host_on-demandMatch11.0.3.0

ibmrational_host_on-demandMatch11.0.4.0

ibmrational_host_on-demandMatch11.0.5.0

ibmrational_host_on-demandMatch11.0.5.1

ibmrational_host_on-demandMatch11.0.6.0

ibmrational_host_on-demandMatch11.0.6.1

ibmservice_delivery_managerMatch7.2.1.0

ibmservice_delivery_managerMatch7.2.2.0

ibmsmart_analytics_system_5600_softwareMatch-

ibmsmart_analytics_system_5600_softwareMatch9.7

ibmtivoli_monitoringMatch6.1.0

ibmtivoli_monitoringMatch6.1.0.7

ibmtivoli_monitoringMatch6.2.0

ibmtivoli_monitoringMatch6.2.0.1

ibmtivoli_monitoringMatch6.2.0.2

ibmtivoli_monitoringMatch6.2.0.3

ibmtivoli_monitoringMatch6.2.1

ibmtivoli_monitoringMatch6.2.1.0

ibmtivoli_monitoringMatch6.2.1.1

ibmtivoli_monitoringMatch6.2.1.2

ibmtivoli_monitoringMatch6.2.1.3

ibmtivoli_monitoringMatch6.2.1.4

ibmtivoli_monitoringMatch6.2.2

ibmtivoli_monitoringMatch6.2.2.0

ibmtivoli_monitoringMatch6.2.2.1

ibmtivoli_monitoringMatch6.2.2.2

ibmtivoli_monitoringMatch6.2.2.3

ibmtivoli_monitoringMatch6.2.2.4

ibmtivoli_monitoringMatch6.2.2.5

ibmtivoli_monitoringMatch6.2.2.6

ibmtivoli_monitoringMatch6.2.2.7

ibmtivoli_monitoringMatch6.2.2.8

ibmtivoli_monitoringMatch6.2.2.9

ibmtivoli_monitoringMatch6.2.3

ibmtivoli_monitoringMatch6.2.3.0

ibmtivoli_monitoringMatch6.2.3.1

ibmtivoli_monitoringMatch6.2.3.2

ibmtivoli_remote_controlMatch5.1.2

ibmwebsphere_real_timeMatch2.0

ibmwebsphere_real_timeMatch3.0

tivoli_storage_productivity_center5.0

tivoli_storage_productivity_center5.1

tivoli_storage_productivity_center5.1.1

ibmsmart_analytics_system_5600Match7200

VendorProductVersionCPE
ibmjava*cpe:2.3:a:ibm:java:*:*:*:*:*:*:*:*
ibmlotus_domino8.0cpe:2.3:a:ibm:lotus_domino:8.0:*:*:*:*:*:*:*
ibmlotus_domino8.0.1cpe:2.3:a:ibm:lotus_domino:8.0.1:*:*:*:*:*:*:*
ibmlotus_domino8.0.2cpe:2.3:a:ibm:lotus_domino:8.0.2:*:*:*:*:*:*:*
ibmlotus_domino8.0.2.1cpe:2.3:a:ibm:lotus_domino:8.0.2.1:*:*:*:*:*:*:*
ibmlotus_domino8.0.2.2cpe:2.3:a:ibm:lotus_domino:8.0.2.2:*:*:*:*:*:*:*
ibmlotus_domino8.0.2.3cpe:2.3:a:ibm:lotus_domino:8.0.2.3:*:*:*:*:*:*:*
ibmlotus_domino8.0.2.4cpe:2.3:a:ibm:lotus_domino:8.0.2.4:*:*:*:*:*:*:*
ibmlotus_domino8.5.0cpe:2.3:a:ibm:lotus_domino:8.5.0:*:*:*:*:*:*:*
ibmlotus_domino8.5.0.1cpe:2.3:a:ibm:lotus_domino:8.5.0.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ibm	java	*	cpe:2.3:a:ibm:java::::::::
ibm	lotus_domino	8.0	cpe:2.3:a:ibm:lotus_domino:8.0:::::::*
ibm	lotus_domino	8.0.1	cpe:2.3:a:ibm:lotus_domino:8.0.1:::::::*
ibm	lotus_domino	8.0.2	cpe:2.3:a:ibm:lotus_domino:8.0.2:::::::*
ibm	lotus_domino	8.0.2.1	cpe:2.3:a:ibm:lotus_domino:8.0.2.1:::::::*
ibm	lotus_domino	8.0.2.2	cpe:2.3:a:ibm:lotus_domino:8.0.2.2:::::::*
ibm	lotus_domino	8.0.2.3	cpe:2.3:a:ibm:lotus_domino:8.0.2.3:::::::*
ibm	lotus_domino	8.0.2.4	cpe:2.3:a:ibm:lotus_domino:8.0.2.4:::::::*
ibm	lotus_domino	8.5.0	cpe:2.3:a:ibm:lotus_domino:8.5.0:::::::*
ibm	lotus_domino	8.5.0.1	cpe:2.3:a:ibm:lotus_domino:8.5.0.1:::::::*

Rows per page:

1-10 of 1251

References

rhn.redhat.com/errata/RHSA-2012-1465.html

rhn.redhat.com/errata/RHSA-2012-1466.html

rhn.redhat.com/errata/RHSA-2012-1467.html

rhn.redhat.com/errata/RHSA-2013-1455.html

rhn.redhat.com/errata/RHSA-2013-1456.html

seclists.org/bugtraq/2012/Sep/38

secunia.com/advisories/51326

secunia.com/advisories/51327

secunia.com/advisories/51328

secunia.com/advisories/51393

secunia.com/advisories/51634

www-01.ibm.com/support/docview.wss?uid=swg1IV29665

www-01.ibm.com/support/docview.wss?uid=swg21615705

www-01.ibm.com/support/docview.wss?uid=swg21615800

www-01.ibm.com/support/docview.wss?uid=swg21616490

www-01.ibm.com/support/docview.wss?uid=swg21616594

www-01.ibm.com/support/docview.wss?uid=swg21616616

www-01.ibm.com/support/docview.wss?uid=swg21616617

www-01.ibm.com/support/docview.wss?uid=swg21616652

www-01.ibm.com/support/docview.wss?uid=swg21616708

www-01.ibm.com/support/docview.wss?uid=swg21621154

www-01.ibm.com/support/docview.wss?uid=swg21631786

www.securityfocus.com/bid/55495

exchange.xforce.ibmcloud.com/vulnerabilities/78766

www-304.ibm.com/support/docview.wss?uid=swg21616546

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

5.3

Confidence

High

EPSS

0.829

Percentile

98.4%

JSON

Related for CVE-2012-4822