Security Bulletin: Security vulnerability in Rational Developer for System z (CVE-2013-0485)

Summary

An unspecified vulnerability in IBM Rational Developer for System z could allow remote attackers to execute arbitrary commands via unknown vectors.

Vulnerability Details

| Subscribe to My Notifications to be notified of important product support alerts like this.

• Follow this link for more information (requires login with your IBM ID)
  —|—

CVE ID:CVE-2013-0485

Description: Unspecified vulnerability in IBM Java SDK before 7 before SR4-FP1, 6 before SR13-FP1, 5.0 before SR16-FP1, and 1.4.2 before SR13-FP16 has unknown impact and attack vectors related to Class Libraries.

*CVSS:

Base Score: 10
Access Vector: Network
Access Complexity: Low
Authentication: None
Confidentiality Impact: Complete
Integrity Impact: Complete
Availability Impact: Complete

Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/81731&gt; for the current score
Exploitability: Unproven
Remediation Level: Official-Fix
Report Confidence: Confirmed

CVSS Environmental Score*: Undefined
CVSS Vector: (AV:N/AC:M/Au:S/C:N/I:P/A:N)

Affected Products and Versions

IBM Rational Developer for System z 8.5.x version z/OS JMON server.

Remediation/Fixes

PTF upgrade to the latest IBM Rational Developer for System z level.

• 4034401: 8.5.1: UK91676 PTF for Rational Developer for System z Host Options

Workarounds and Mitigations

None