Lucene search
Veracode Vulnerability DatabaseVERACODE:19805HistoryMay 16, 2019 - 3:24 a.m.
Directory Traversal
2019-05-1603:24:18
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
0.002 Low
EPSS
Percentile
58.5%
IBM Java SE is vulnerable to directory traversal vulnerability. This occurs when extracting compressed dump files since the IBM SDK does not not protect against path traversal attacks.
| CPE | Name | Operator | Version |
|---|---|---|---|
| java-1.8.0-ibm | eq | 1.8.0.4.1__1jpp.1.el6_8 | |
| java-1.7.1-ibm | eq | 1.7.1.4.1__1jpp.1.el6_8 | |
| java-1.7.1-ibm | eq | 1.7.1.3.40__1jpp.1.el6_7 |
References
www.ibm.com/support/docview.wss?uid=ibm10719653
www.securityfocus.com/bid/105118
www.securitytracker.com/id/1041765
access.redhat.com/errata/RHSA-2018:2568
access.redhat.com/errata/RHSA-2018:2569
access.redhat.com/errata/RHSA-2018:2575
access.redhat.com/errata/RHSA-2018:2576
access.redhat.com/errata/RHSA-2018:2712
access.redhat.com/errata/RHSA-2018:2713
access.redhat.com/security/updates/classification/#important
exchange.xforce.ibmcloud.com/vulnerabilities/144882
www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html
Related
ibm
ibm
ubuntucve
ubuntucve
CVE-2018-1656
2018-08-20 00:00:00
redhatcve
redhatcve
CVE-2018-1656
2018-08-17 20:49:15
nvd
nvd
CVE-2018-1656
2018-08-20 21:29:01
cve
cve
CVE-2018-1656
2018-08-20 21:29:01
prion
prion
Path traversal
2018-08-20 21:29:00
cvelist
cvelist
CVE-2018-1656
2018-08-16 00:00:00
nessus
nessus
SUSE SLES12 Security Update : java-1_7_1-ibm (SUSE-SU-2018:2649-2)
2018-10-22 00:00:00
RHEL 6 : java-1.7.1-ibm (RHSA-2018:2576)
2018-08-29 00:00:00
SUSE SLES12 Security Update : java-1_7_1-ibm (SUSE-SU-2018:2649-1)
2018-09-10 00:00:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2018:2583-1)
2021-06-09 00:00:00
SUSE: Security Advisory (SUSE-SU-2018:2649-2)
2021-04-19 00:00:00
SUSE: Security Advisory (SUSE-SU-2018:2574-1)
2021-06-09 00:00:00
redhat
redhat
(RHSA-2018:2712) Moderate: java-1.7.1-ibm security update
2018-09-17 14:42:53
(RHSA-2018:2576) Important: java-1.7.1-ibm security update
2018-08-28 19:07:03
(RHSA-2018:2569) Important: java-1.7.1-ibm security update
2018-08-27 14:10:03
aix
aix
Multiple vulnerabilities in IBM Java SDK affect AIX
2018-09-19 08:42:00
oracle
oracle
Oracle Critical Patch Update Advisory - April 2019
2019-04-16 00:00:00