Security Bulletin: Multiple Vulnerabilities in Rational Synergy

Summary

Vulnerabilities in the Java Runtime Environment (JRE) 6 SR10 and earlier component shipped with Rational Synergy may affect the security of the product.

Vulnerability Details

| Subscribe to My Notifications to be notified of important product support alerts like this.

• Follow this link for more information (requires login with your IBM ID)
  —|—

CVE ID:CVE-2012-0551

Description: Unspecified vulnerability in the Java Runtime Environment (JRE) 6 update 32 and earlier, allows remote attackers to affect confidentiality and integrity via unknown vectors related to Web Container or Deployment.

CVSS Base Score**:** 4.3 CVSS Temporal Score**:** See _<https://exchange.xforce.ibmcloud.com/vulnerabilities/75010&gt;_ for the current score *CVSS Environmental Score:**Undefined CVSS Vector: (AV:N/AC:M/Au:N/C:P/I:P/A:N)

CVE ID:CVE-2012-1717

Description: Unspecified vulnerability in the Java Runtime Environment (JRE) 6 update 32 and earlier, allows local users to affect confidentiality via unknown vectors related to printing on Solaris or Linux.

CVSS Base Score**:** 2.1 CVSS Temporal Score**:** See _<https://exchange.xforce.ibmcloud.com/vulnerabilities/76251&gt;_ for the current score *CVSS Environmental Score:**Undefined CVSS Vector: (AV:L/AC:L/Au:N/C:P/I:N/A:N)

CVE ID:CVE-2012-1716

Description: Unspecified vulnerability in the Java Runtime Environment (JRE) 6 update 32 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Swing.

CVSS Base Score**:** 10.0 CVSS Temporal Score**:** See _<https://exchange.xforce.ibmcloud.com/vulnerabilities/76244&gt;_ for the current score *CVSS Environmental Score:**Undefined CVSS Vector: (AV:N/AC:L/Au:N/C:C/I:C/A:C)

CVE ID:CVE-2012-1713

Description: Unspecified vulnerability in the Java Runtime Environment (JRE) 6 update 32 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.

CVSS Base Score: 10.0 **CVSS Temporal Score: **See <https://exchange.xforce.ibmcloud.com/vulnerabilities/76239&gt; for the current score *CVSS Environmental Score:**Undefined **CVSS Vector: **(AV:N/AC:L/Au:N/C:C/I:C/A:C)

CVE ID:CVE-2012-1718

Description: Unspecified vulnerability in the Java Runtime Environment (JRE) 6 update 32 and earlier, allows remote attackers to affect availability via unknown vectors related to Security.

CVSS Base Score: 5.0 **CVSS Temporal Score:**See _<https://exchange.xforce.ibmcloud.com/vulnerabilities/76249&gt;_ for the current score *CVSS Environmental Score: **Undefined CVSS Vector: (AV:N/AC:L/Au:N/C:N/I:N/A:P)

CVE ID:CVE-2012-1719

Description: Unspecified vulnerability in the Java Runtime Environment (JRE) 6 update 32 and earlier, allows remote attackers to affect integrity, related to CORBA.

CVSS Base Score: 5.0 **CVSS Temporal Score: **See _<https://exchange.xforce.ibmcloud.com/vulnerabilities/76247&gt;_ for the current score *CVSS Environmental Score:**Undefined **CVSS Vector: **(AV:N/AC:L/Au:N/C:N/I:P/A:N)

CVE ID:CVE-2012-1722

**Description:**Unspecified vulnerability in the Java Runtime Environment (JRE) 6 update 32 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2012-1721.

CVSS Base Score: 10.0 **CVSS Temporal Score:**See _<https://exchange.xforce.ibmcloud.com/vulnerabilities/76241&gt;_ for the current score *CVSS Environmental Score:**Undefined CVSS Vector: (AV:N/AC:L/Au:N/C:C/I:C/A:C)

CVE ID:CVE-2012-1721

**Description:**Unspecified vulnerability in the Java Runtime Environment (JRE) 6 update 32 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2012-1722.

CVSS Base Score**:** 10.0 CVSS Temporal Score**:See _<https://exchange.xforce.ibmcloud.com/vulnerabilities/76240&gt;_ for the current score
CVSS Environmental Score*:** Undefined CVSS ****Vector:(AV:N/AC:L/Au:N/C:C/I:C/A:C)

CVE ID:CVE-2012-1725

Description: Unspecified vulnerability in the Java Runtime Environment (JRE) 6 update 32 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.

CVSS Base Score: 10.0 **CVSS Temporal Score:**See _<https://exchange.xforce.ibmcloud.com/vulnerabilities/76243&gt;_ for the current score *CVSS Environmental Score:**Undefined CVSS Vector: (AV:N/AC:L/Au:N/C:C/I:C/A:C)

CVE ID:CVE-2012-1531

Description: Unspecified vulnerability in the Java Runtime Environment (JRE) 6 update 35 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.

**CVSS Base Score:**10.0
CVSS Temporal Score: See _<https://exchange.xforce.ibmcloud.com/vulnerabilities/79294&gt;_ for the current score *CVSS Environmental Score:**Undefined CVSS Vector: (AV:N/AC:L/Au:N/C:C/I:C/A:C)

CVE ID:CVE-2012-1532

Description: Unspecified vulnerability in the Java Runtime Environment (JRE) 6 update 35 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.

CVSS Base Score**:** 10.0 CVSS Temporal Score**:** See _<https://exchange.xforce.ibmcloud.com/vulnerabilities/26069&gt;_ for the current score CVSS Environmental Score***:** Undefined **CVSS **Vector: (AV:N/AC:L/Au:N/C:C/I:C/A:C)

CVE ID:CVE-2012-1533

Description: Unspecified vulnerability in the Java Runtime Environment (JRE) 6 update 35 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.

CVSS Base Score**:** 10.0 CVSS Temporal Score**:** See _<https://exchange.xforce.ibmcloud.com/vulnerabilities/26069&gt;_ for the current score CVSS Environmental Score***:**Undefined
CVSS****Vector:(AV:N/AC:L/Au:N/C:C/I:C/A:C)

CVE ID:CVE-2012-3143

Description: Unspecified vulnerability in the Java Runtime Environment (JRE) 6 update 35 and earlier, allows remote attackers to affect confidentiality, integrity, and availability, related to JMX.

CVSS Base Score**:** 10.0 CVSS Temporal Score**:** Unknown CVSS Environmental Score***:** Undefined CVSS ****Vector:(AV:N/AC:L/Au:N/C:C/I:C/A:C)

CVE ID:CVE-2012-3159

**Description:**Unspecified vulnerability in the Java Runtime Environment (JRE) 6 update 35 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.

CVSS Base Score: 7.5 CVSS Temporal Score**:** Unknown CVSS Environmental Score***:** Undefined **CVSS **Vector: (AV:N/AC:L/Au:N/C:P/I:P/A:P)

CVE ID:CVE-2012-3216

Description: Unspecified vulnerability in the Java Runtime Environment (JRE) 6 update 35 and earlier, allows remote attackers to affect confidentiality via unknown vectors related to Libraries.

CVSS Base Score: 2.6 **CVSS Temporal Score:**Unknown *CVSS Environmental Score:**Undefined CVSS Vector: (AV:N/AC:H/Au:N/C:P/I:N/A:N)

CVE ID:CVE-2012-4416

Description: Unspecified vulnerability in the Java Runtime Environment (JRE) 6 updates 35 and earlier, allows remote attackers to affect confidentiality and integrity via unknown vectors related to Hotspot.

CVSS Base Score: 6.4 **CVSS Temporal Score:**See _<https://exchange.xforce.ibmcloud.com/vulnerabilities/78432&gt;_ for the current score *CVSS Environmental Score:**Undefined CVSS Vector: (AV:N/AC:L/Au:N/C:P/I:P/A:N)

CVE ID:**CVE-2012-**5068

**Description:**Unspecified vulnerability in the Java Runtime Environment (JRE) 6 update 35 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.

CVSS Base Score**:** 7.5 CVSS Temporal Score**:** See _<https://exchange.xforce.ibmcloud.com/vulnerabilities/79293&gt;_ for the current score CVSS Environmental Score***:** Undefined **CVSS **Vector: (AV:N/AC:L/Au:N/C:P/I:P/A:P)

CVE ID:**CVE-2012-**5069

Description: Unspecified vulnerability in the Java Runtime Environment (JRE) 6 update 35 and earlier, allows remote attackers to affect confidentiality and integrity via unknown vectors related to Concurrency.

CVSS Base Score: 5.8 CVSS Temporal Score**:** Unknown CVSS Environmental Score***:** Undefined **CVSS **Vector: (AV:N/AC:M/Au:N/C:P/I:P/A:N)

CVE ID:**CVE-2012-**5071

Description: Unspecified vulnerability in the Java Runtime Environment (JRE) 6 update 35 and earlier, allows remote attackers to affect confidentiality and integrity, related to JMX.

CVSS Base Score:6.4
CVSS Temporal Score:Unknown
CVSS Environmental Score:* Undefined CVSS ****Vector:(AV:N/AC:L/Au:N/C:P/I:P/A:N)

CVE ID:**CVE-2012-**5072

Description: Unspecified vulnerability in the Java Runtime Environment (JRE) 6 update 35 and earlier, allows remote attackers to affect confidentiality via unknown vectors related to Security.

CVSS Base Score:5.0
CVSS Temporal Score: Unknown CVSS Environmental Score***:** Undefined CVSS Vector**:**(AV:N/AC:L/Au:N/C:P/I:N/A:N)

CVE ID:**CVE-2012-**5073

Description: Unspecified vulnerability in the Java Runtime Environment (JRE) 6 update 35 and earlier, allows remote attackers to affect integrity via unknown vectors related to Libraries.

CVSS Base Score: 5.0 CVSS Temporal Score**:** Unknown CVSS Environmental Score***:** Undefined CVSS Vector**:** (AV:N/AC:L/Au:N/C:P/I:N/A:N)

CVE ID:**CVE-2012-**5075

Description: Unspecified vulnerability in the Java Runtime Environment (JRE) 6 update 35 and earlier, allows remote attackers to affect confidentiality, related to JMX.

CVSS Base Score: 5.0 CVSS Temporal Score**:Unknown
CVSS Environmental Score*:** Undefined CVSS Vector**:**(AV:N/AC:L/Au:N/C:P/I:N/A:N)

Affected Products and Versions

All Rational Synergy supported platforms

Remediation/Fixes

Rational Synergy 7.1.0.x should upgrade to Rational Synergy version 7.1.0.7 (Rational Synergy 7.1.0.7) or later.

Workarounds and Mitigations

None