CVE-2012-4821

Опубликовано: 11 янв. 2013

Источник: nvd

CVSS2: 9.3

EPSS Низкий

Описание

Multiple unspecified vulnerabilities in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 SR14 and earlier, and Java 142 SR13 FP13 and earlier; as used in IBM Rational Host On-Demand, Rational Change, Tivoli Monitoring, Smart Analytics System 5600, Tivoli Remote Control 5.1.2, WebSphere Real Time, Lotus Notes & Domino, Tivoli Storage Productivity Center, and Service Deliver Manager; and other products from other vendors such as Red Hat, allow remote attackers to execute arbitrary code via "insecure use" of the (1) java.lang.Class getDeclaredMethods or nd (2) java.lang.reflect.AccessibleObject setAccessible() methods.

Ссылки

http://rhn.redhat.com/errata/RHSA-2012-1467.html
Third Party Advisory
http://seclists.org/bugtraq/2012/Sep/38
Mailing List
Third Party Advisory
http://secunia.com/advisories/51326
Third Party Advisory
http://secunia.com/advisories/51634
Third Party Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg1IV29659
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21615705
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21615800
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21616490
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21616594
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21616616
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21616617
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21616652
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21616708
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21621154
Vendor Advisory
http://www.securityfocus.com/bid/55495
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/78765
Third Party Advisory
VDB Entry
https://www-304.ibm.com/support/docview.wss?uid=swg21616546
Vendor Advisory
http://rhn.redhat.com/errata/RHSA-2012-1467.html
Third Party Advisory
http://seclists.org/bugtraq/2012/Sep/38
Mailing List
Third Party Advisory
http://secunia.com/advisories/51326
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:java:*:*:*:*:*:*:*:*

Версия от 1.4.2 (включая) до 1.4.2.13.13 (включая)

cpe:2.3:a:ibm:java:*:*:*:*:*:*:*:*

Версия от 5.0.0.0 (включая) до 5.0.14.0 (включая)

cpe:2.3:a:ibm:java:*:*:*:*:*:*:*:*

Версия от 6.0.0.0 (включая) до 6.0.11.0 (включая)

cpe:2.3:a:ibm:java:*:*:*:*:*:*:*:*

Версия от 7.0.0.0 (включая) до 7.0.2.0 (включая)

cpe:2.3:a:ibm:lotus_domino:8.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:lotus_domino:8.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:lotus_domino:8.0.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:lotus_domino:8.0.2.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:lotus_domino:8.0.2.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:lotus_domino:8.0.2.3:*:*:*:*:*:*:*

cpe:2.3:a:ibm:lotus_domino:8.0.2.4:*:*:*:*:*:*:*

cpe:2.3:a:ibm:lotus_domino:8.5.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:lotus_domino:8.5.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:lotus_domino:8.5.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:lotus_domino:8.5.1.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:lotus_domino:8.5.1.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:lotus_domino:8.5.1.3:*:*:*:*:*:*:*

cpe:2.3:a:ibm:lotus_domino:8.5.1.4:*:*:*:*:*:*:*

cpe:2.3:a:ibm:lotus_domino:8.5.1.5:*:*:*:*:*:*:*

cpe:2.3:a:ibm:lotus_domino:8.5.2.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:lotus_domino:8.5.2.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:lotus_domino:8.5.2.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:lotus_domino:8.5.2.3:*:*:*:*:*:*:*

cpe:2.3:a:ibm:lotus_domino:8.5.2.4:*:*:*:*:*:*:*

cpe:2.3:a:ibm:lotus_domino:8.5.3.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:lotus_domino:8.5.3.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:lotus_domino:8.5.3.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:lotus_notes:8.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:lotus_notes:8.0.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:lotus_notes:8.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:lotus_notes:8.0.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:lotus_notes:8.0.2.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:lotus_notes:8.0.2.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:lotus_notes:8.0.2.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:lotus_notes:8.0.2.3:*:*:*:*:*:*:*

cpe:2.3:a:ibm:lotus_notes:8.0.2.4:*:*:*:*:*:*:*

cpe:2.3:a:ibm:lotus_notes:8.0.2.5:*:*:*:*:*:*:*

cpe:2.3:a:ibm:lotus_notes:8.0.2.6:*:*:*:*:*:*:*

cpe:2.3:a:ibm:lotus_notes:8.5:*:*:*:*:*:*:*

cpe:2.3:a:ibm:lotus_notes:8.5.0.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:lotus_notes:8.5.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:lotus_notes:8.5.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:lotus_notes:8.5.1.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:lotus_notes:8.5.1.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:lotus_notes:8.5.1.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:lotus_notes:8.5.1.3:*:*:*:*:*:*:*

cpe:2.3:a:ibm:lotus_notes:8.5.1.4:*:*:*:*:*:*:*

cpe:2.3:a:ibm:lotus_notes:8.5.1.5:*:*:*:*:*:*:*

cpe:2.3:a:ibm:lotus_notes:8.5.2.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:lotus_notes:8.5.2.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:lotus_notes:8.5.2.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:lotus_notes:8.5.2.3:*:*:*:*:*:*:*

cpe:2.3:a:ibm:lotus_notes:8.5.3:*:*:*:*:*:*:*

cpe:2.3:a:ibm:lotus_notes:8.5.3.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:lotus_notes:8.5.3.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:lotus_notes:8.5.4:*:*:*:*:*:*:*

cpe:2.3:a:ibm:lotus_notes_sametime:8.0.80407:*:*:*:*:*:*:*

cpe:2.3:a:ibm:lotus_notes_sametime:8.0.80822:*:*:*:*:*:*:*

cpe:2.3:a:ibm:lotus_notes_sametime:8.5.1.20100709-1631:*:*:*:advanced_embedded:*:*:*

cpe:2.3:a:ibm:lotus_notes_traveler:8.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:lotus_notes_traveler:8.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:lotus_notes_traveler:8.0.1.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:lotus_notes_traveler:8.0.1.3:*:*:*:*:*:*:*

cpe:2.3:a:ibm:lotus_notes_traveler:8.5.0.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:lotus_notes_traveler:8.5.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:lotus_notes_traveler:8.5.0.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:lotus_notes_traveler:8.5.1.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:lotus_notes_traveler:8.5.1.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:lotus_notes_traveler:8.5.1.3:*:*:*:*:*:*:*

cpe:2.3:a:ibm:lotus_notes_traveler:8.5.2.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:lotus_notes_traveler:8.5.3:*:*:*:*:*:*:*

cpe:2.3:a:ibm:lotus_notes_traveler:8.5.3.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:lotus_notes_traveler:8.5.3.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:lotus_notes_traveler:8.5.3.3:*:*:*:*:*:*:*

cpe:2.3:a:ibm:lotus_notes_traveler:8.5.3.3:interim_fix_1:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_change:4.7:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_change:5.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_change:5.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_change:5.3:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_host_on-demand:1.6.0.12:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_host_on-demand:8.0.8.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_host_on-demand:9.0.8.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_host_on-demand:10.0.9.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_host_on-demand:10.0.10.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_host_on-demand:11.0.3.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_host_on-demand:11.0.4.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_host_on-demand:11.0.5.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_host_on-demand:11.0.5.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_host_on-demand:11.0.6.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_host_on-demand:11.0.6.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:service_delivery_manager:7.2.1.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:service_delivery_manager:7.2.2.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:smart_analytics_system_5600_software:-:*:*:*:*:*:*:*

cpe:2.3:a:ibm:smart_analytics_system_5600_software:9.7:*:*:*:*:*:*:*

cpe:2.3:a:ibm:tivoli_monitoring:6.1.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:tivoli_monitoring:6.1.0.7:*:*:*:*:*:*:*

cpe:2.3:a:ibm:tivoli_monitoring:6.2.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:tivoli_monitoring:6.2.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:tivoli_monitoring:6.2.0.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:tivoli_monitoring:6.2.0.3:*:*:*:*:*:*:*

cpe:2.3:a:ibm:tivoli_monitoring:6.2.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:tivoli_monitoring:6.2.1.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:tivoli_monitoring:6.2.1.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:tivoli_monitoring:6.2.1.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:tivoli_monitoring:6.2.1.3:*:*:*:*:*:*:*

cpe:2.3:a:ibm:tivoli_monitoring:6.2.1.4:*:*:*:*:*:*:*

cpe:2.3:a:ibm:tivoli_monitoring:6.2.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:tivoli_monitoring:6.2.2.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:tivoli_monitoring:6.2.2.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:tivoli_monitoring:6.2.2.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:tivoli_monitoring:6.2.2.3:*:*:*:*:*:*:*

cpe:2.3:a:ibm:tivoli_monitoring:6.2.2.4:*:*:*:*:*:*:*

cpe:2.3:a:ibm:tivoli_monitoring:6.2.2.5:*:*:*:*:*:*:*

cpe:2.3:a:ibm:tivoli_monitoring:6.2.2.6:*:*:*:*:*:*:*

cpe:2.3:a:ibm:tivoli_monitoring:6.2.2.7:*:*:*:*:*:*:*

cpe:2.3:a:ibm:tivoli_monitoring:6.2.2.8:*:*:*:*:*:*:*

cpe:2.3:a:ibm:tivoli_monitoring:6.2.2.9:*:*:*:*:*:*:*

cpe:2.3:a:ibm:tivoli_monitoring:6.2.3:*:*:*:*:*:*:*

cpe:2.3:a:ibm:tivoli_monitoring:6.2.3.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:tivoli_monitoring:6.2.3.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:tivoli_monitoring:6.2.3.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:tivoli_remote_control:5.1.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:websphere_real_time:2.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:websphere_real_time:3.0:*:*:*:*:*:*:*

cpe:2.3:a:tivoli_storage_productivity_center:5.0:*:*:*:*:*:*:*:*

cpe:2.3:a:tivoli_storage_productivity_center:5.1:*:*:*:*:*:*:*:*

cpe:2.3:a:tivoli_storage_productivity_center:5.1.1:*:*:*:*:*:*:*:*

cpe:2.3:h:ibm:smart_analytics_system_5600:7200:*:*:*:*:*:*:*

EPSS

Процентиль: 91%

0.06647

Низкий

9.3 Critical

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

CVE-2012-4821

redhat

около 13 лет назад

CVE-2012-4821

debian

около 13 лет назад

Multiple unspecified vulnerabilities in the JRE component in IBM Java ...

GHSA-m96x-9xwr-7g88

github

больше 3 лет назад

EPSS

Процентиль: 91%

0.06647

Низкий

9.3 Critical

CVSS2

Дефекты

NVD-CWE-noinfo