CVE-2014-0878
The IBMSecureRandom component in the IBMJCE and IBMSecureRandom cryptographic providers in IBM SDK Java Technology Edition 5.0 before Servic
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
The IBMSecureRandom component in the IBMJCE and IBMSecureRandom cryptographic providers in IBM SDK Java Technology Edition 5.0 before Service Refresh 16 FP6, 6 before Service Refresh 16, 6.0.1 before Service Refresh 8, 7 before Service Refresh 7, and 7R1 before Service Refresh 1 makes it easier for context-dependent attackers to defeat cryptographic protection mechanisms by predicting the random number generator's output.
Timeline
- CVE published
- Record last updated
Affected versions
- n/a n/a
Version range not reported
References 22
www-01.ibm.com
- support/docview.wss?uid=swg21680750
- support/docview.wss?uid=swg21679610
- support/docview.wss?uid=swg21676672
- support/docview.wss?uid=swg21689593
- support/docview.wss?uid=swg21681256
- support/docview.wss?uid=swg21674539
- support/docview.wss?uid=swg21686717
- support/docview.wss?uid=swg21683484
- support/docview.wss?uid=swg21673836
- support/docview.wss?uid=swg21676746
- support/docview.wss?uid=swg21672043
- support/docview.wss?uid=swg21679713
- support/docview.wss?uid=swg21676703