CVE-2012-4820
Unspecified vulnerability in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 SR
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
Unspecified vulnerability in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 SR14 and earlier, and Java 142 SR13 FP13 and earlier; as used in IBM Rational Host On-Demand, Rational Change, Tivoli Monitoring, Smart Analytics System 5600, Tivoli Remote Control 5.1.2, WebSphere Real Time, Lotus Notes & Domino, Tivoli Storage Productivity Center, and Service Deliver Manager; and other products from other vendors such as Red Hat, when running under a security manager, allows remote attackers to gain privileges by modifying or removing the security manager via vectors related to "insecure use of the java.lang.reflect.Method invoke() method."
Timeline
- CVE published
- Record last updated
Affected versions
- n/a n/a
Version range not reported
References 25
rhn.redhat.com
www-01.ibm.com
- support/docview.wss?uid=swg21616616
- support/docview.wss?uid=swg21616594
- support/docview.wss?uid=swg21616617
- support/docview.wss?uid=swg21621154
- support/docview.wss?uid=swg21616652
- support/docview.wss?uid=swg21631786
- support/docview.wss?uid=swg21615800
- support/docview.wss?uid=swg21616490
- support/docview.wss?uid=swg21616708
- support/docview.wss?uid=swg1IV29654
- support/docview.wss?uid=swg21615705