Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2013-3009
HistoryJul 23, 2013 - 11:03 a.m.

CVE-2013-3009

2013-07-2311:03:19
[email protected]
web.nvd.nist.gov

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

5.8 Medium

AI Score

Confidence

High

0.032 Low

EPSS

Percentile

91.2%

JSON

The com.ibm.CORBA.iiop.ClientDelegate class in IBM Java 1.4.2 before 1.4.2 SR13-FP18, 5.0 before 5.0 SR16-FP3, 6 before 6 SR14, 6.0.1 before 6.0.1 SR6, and 7 before 7 SR5 improperly exposes the invoke method of the java.lang.reflect.Method class, which allows remote attackers to call setSecurityManager and bypass a sandbox protection mechanism via vectors related to the AccessController doPrivileged block.

Affected configurations

NVD
Node
ibmjavaMatch1.4.2
OR
ibmjavaMatch1.4.2.13
OR
ibmjavaMatch1.4.2.13.1
OR
ibmjavaMatch1.4.2.13.2
OR
ibmjavaMatch1.4.2.13.3
OR
ibmjavaMatch1.4.2.13.4
OR
ibmjavaMatch1.4.2.13.5
OR
ibmjavaMatch1.4.2.13.6
OR
ibmjavaMatch1.4.2.13.7
OR
ibmjavaMatch1.4.2.13.8
OR
ibmjavaMatch1.4.2.13.9
OR
ibmjavaMatch1.4.2.13.10
OR
ibmjavaMatch1.4.2.13.11
OR
ibmjavaMatch1.4.2.13.12
OR
ibmjavaMatch1.4.2.13.13
OR
ibmjavaMatch1.4.2.13.14
OR
ibmjavaMatch1.4.2.13.15
OR
ibmjavaMatch1.4.2.13.16
OR
ibmjavaMatch1.4.2.13.17
Node
ibmjavaMatch7.0.0.0
OR
ibmjavaMatch7.0.1.0
OR
ibmjavaMatch7.0.2.0
OR
ibmjavaMatch7.0.3.0
OR
ibmjavaMatch7.0.4.0
OR
ibmjavaMatch7.0.4.1
OR
ibmjavaMatch7.0.4.2
Node
ibmjavaMatch6.0.0.0
OR
ibmjavaMatch6.0.1.0
OR
ibmjavaMatch6.0.2.0
OR
ibmjavaMatch6.0.3.0
OR
ibmjavaMatch6.0.4.0
OR
ibmjavaMatch6.0.5.0
OR
ibmjavaMatch6.0.6.0
OR
ibmjavaMatch6.0.7.0
OR
ibmjavaMatch6.0.8.0
OR
ibmjavaMatch6.0.8.1
OR
ibmjavaMatch6.0.9.0
OR
ibmjavaMatch6.0.9.1
OR
ibmjavaMatch6.0.9.2
OR
ibmjavaMatch6.0.10.0
OR
ibmjavaMatch6.0.10.1
OR
ibmjavaMatch6.0.11.0
OR
ibmjavaMatch6.0.12.0
OR
ibmjavaMatch6.0.13.0
OR
ibmjavaMatch6.0.13.1
OR
ibmjavaMatch6.0.13.2
Node
ibmjavaMatch5.0.0.0
OR
ibmjavaMatch5.0.11.0
OR
ibmjavaMatch5.0.11.1
OR
ibmjavaMatch5.0.11.2
OR
ibmjavaMatch5.0.12.0
OR
ibmjavaMatch5.0.12.1
OR
ibmjavaMatch5.0.12.2
OR
ibmjavaMatch5.0.12.3
OR
ibmjavaMatch5.0.12.4
OR
ibmjavaMatch5.0.12.5
OR
ibmjavaMatch5.0.13.0
OR
ibmjavaMatch5.0.14.0
OR
ibmjavaMatch5.0.15.0
OR
ibmjavaMatch5.0.16.0
OR
ibmjavaMatch5.0.16.1
OR
ibmjavaMatch5.0.16.2

References

Related

prion 4
cvelist 4
cve 4
ibm 43
nvd 3
nessus 23
suse 17
openvas 17
aix 1
redhat 3
veracode 1
prion
prion
Design/Logic Flaw
2013-07-23 11:03:00
Design/Logic Flaw
2016-06-03 14:59:00
Security feature bypass
2013-07-23 11:03:00
cvelist
cvelist
CVE-2013-3009
2013-07-23 10:00:00
CVE-2016-0363
2016-06-03 14:00:00
CVE-2013-3012
2013-07-23 10:00:00
cve
cve
CVE-2013-3009
2013-07-23 11:03:19
CVE-2016-0363
2016-06-03 14:59:01
CVE-2013-3012
2013-07-23 11:03:19
ibm
ibm
Security Bulletin: A Vulnerability in IBM Java SDK affect eDiscovery Analyzer (CVE-2016-0363))
2018-06-17 12:15:58
Security Bulletin:Vulnerability in IBM Java Runtime affect IBM Host On-Demand (CVE-2016-0363)
2018-08-03 04:23:43
Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect Tivoli Storage Productivity Center (CVE-2016-0363)
2022-08-19 21:04:31
nvd
nvd
CVE-2016-0363
2016-06-03 14:59:01
CVE-2013-3011
2013-07-23 11:03:19
CVE-2013-3012
2013-07-23 11:03:19
nessus
nessus
IBM Java 6.0 < 6.0.16.25 / 6.1 < 6.1.8.25 / 7.0 < 7.0.9.40 / 7.1 < 7.1.3.40 / 8.0 < 8.0.3.0 Multiple Vulnerabilities (Apr 1, 2016)
2022-04-29 00:00:00
SUSE SLES11 Security Update : java-1_6_0-ibm (SUSE-SU-2016:1379-1)
2016-05-24 00:00:00
SUSE SLES11 Security Update : java-1_7_1-ibm (SUSE-SU-2016:1300-1)
2016-05-16 00:00:00
suse
suse
Security update for java-1_7_1-ibm (important)
2016-05-13 16:08:16
Security update for IBM Java 1.6.0 (important)
2016-05-24 14:08:01
Security update for java-1_6_0-ibm (important)
2016-05-21 02:08:31
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2016:1388-1)
2021-06-09 00:00:00
SUSE: Security Advisory for java-1_7_1-ibm (SUSE-SU-2016:1299-1)
2016-05-17 00:00:00
SUSE: Security Advisory (SUSE-SU-2016:1300-1)
2021-06-09 00:00:00
aix
aix
Multiple vulnerabilities in IBM Java SDK affect AIX
2016-05-06 09:00:55
redhat
redhat
(RHSA-2013:1081) Important: java-1.5.0-ibm security update
2013-07-16 00:00:00
(RHSA-2013:1059) Critical: java-1.6.0-ibm security update
2013-07-15 00:00:00
(RHSA-2013:1060) Critical: java-1.7.0-ibm security update
2013-07-15 00:00:00
veracode
veracode
Memory Corruption
2019-05-02 04:46:32

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

5.8 Medium

AI Score

Confidence

High

0.032 Low

EPSS

Percentile

91.2%

JSON
Related for NVD:CVE-2013-3009
prion4cvelist4cve4ibm43nvd3nessus23suse17openvas17aix1redhat3veracode1