Unspecified vulnerability in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 SR14 and earlier, and Java 142 SR13 FP13 and earlier; as used in IBM Rational Host On-Demand, Rational Change, Tivoli Monitoring, Smart Analytics System 5600, Tivoli Remote Control 5.1.2, WebSphere Real Time, Lotus Notes & Domino, Tivoli Storage Productivity Center, and Service Deliver Manager; and other products from other vendors such as Red Hat, when running under a security manager, allows remote attackers to gain privileges by modifying or removing the security manager via vectors related to "insecure use of the java.lang.reflect.Method invoke() method."
Project Subscriptions
| Vendors | Products |
|---|---|
|
Ibm
Subscribe
|
Java
Subscribe
Lotus Domino
Subscribe
Lotus Notes
Subscribe
Lotus Notes Sametime
Subscribe
Lotus Notes Traveler
Subscribe
Rational Change
Subscribe
Rational Host On-demand
Subscribe
Service Delivery Manager
Subscribe
Smart Analytics System 5600
Subscribe
Smart Analytics System 5600 Software
Subscribe
Tivoli Monitoring
Subscribe
Tivoli Remote Control
Subscribe
Websphere Real Time
Subscribe
|
|
Redhat
Subscribe
|
|
|
Tivoli Storage Productivity Center
Subscribe
|
Advisories
| Source | ID | Title |
|---|---|---|
EUVD |
EUVD-2012-4745 | Unspecified vulnerability in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 SR14 and earlier, and Java 142 SR13 FP13 and earlier; as used in IBM Rational Host On-Demand, Rational Change, Tivoli Monitoring, Smart Analytics System 5600, Tivoli Remote Control 5.1.2, WebSphere Real Time, Lotus Notes & Domino, Tivoli Storage Productivity Center, and Service Deliver Manager; and other products from other vendors such as Red Hat, when running under a security manager, allows remote attackers to gain privileges by modifying or removing the security manager via vectors related to "insecure use of the java.lang.reflect.Method invoke() method." |
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
No history.
Projects
Sign in to view the affected projects.
Status: PUBLISHED
Assigner: ibm
Published:
Updated: 2024-08-06T20:50:17.367Z
Reserved: 2012-09-06T00:00:00
Link: CVE-2012-4820
No data.
Status : Deferred
Published: 2013-01-11T00:55:00.963
Modified: 2025-04-11T00:51:21.963
Link: CVE-2012-4820
OpenCVE Enrichment
No data.
Weaknesses
EUVD