Lucene search

K
ibmIBM30D2B7728CD06B10CA0EA1966F959EFC5FC02648B51A4446148CDFC70FF37FEB
HistoryAug 03, 2018 - 4:23 a.m.

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect Rational Developer for i, Rational Developer for AIX and Linux, Rational Developer for Power Systems Software

2018-08-0304:23:43
www.ibm.com
12

EPSS

0.071

Percentile

94.0%

Summary

There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Versions 7, and 8 that are used by Rational Developer for i, Rational Developer for AIX and Linux, Rational Developer for Power Systems Software (CVE-2016-0363, CVE-2016-0376). These issues were disclosed as part of the IBM Java SDK updates in April 2016.

Vulnerability Details

Rational Developer for i, Rational Developer for AIX and Linux, Rational Developer for Power Systems Software***are affected by the following vulnerabilities: CVEID: CVE-2016-0363**
DESCRIPTION:** IBM SDK, Java Technology Edition contains a vulnerability in the IBM ORB implementation that may allow untrusted code running under a security manager to elevate its privileges.
CVSS Base Score: 8.1
CVSS Temporal Score: See https://exchange.xforce.ibmcloud.com/vulnerabilities/112016 for the current score
CVSS Environmental Score
: Undefined
CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)

CVEID: CVE-2016-0376**
DESCRIPTION:** A vulnerability in IBM Java SDK could allow a remote attacker to execute arbitrary code on the system. This vulnerability allows code running under a security manager to escalate its privileges by modifying or removing the security manager.
CVSS Base Score: 8.1
CVSS Temporal Score: See https://exchange.xforce.ibmcloud.com/vulnerabilities/112152 for the current score
CVSS Environmental Score*: Undefined
CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)

Affected Products and Versions

Product Name

| Versions Affected
—|—
Rational Developer for Power Systems Software| 8.5, 8.5.1
Rational Developer for i| 9.0, 9.0.0.1, 9.0.1, 9.1, 9.1.1, 9.1.1.1, 9.5, 9.5.0.1, 9.5.0.2, 9.5.0.3
Rational Developer for AIX and Linux, AIX COBOL Edition| 9.0, 9.0.0.1, 9.0.1, 9.1, 9.1.1, 9.1.1.1, 9.1.1.2
Rational Developer for AIX and Linux, C/C++ Edition| 9.0, 9.0.0.1, 9.0.1, 9.1, 9.1.1, 9.1.1.1, 9.1.1.2

Remediation/Fixes

Product

| VRMF|Remediation/First Fix
—|—|—
Rational Developer for Power Systems Software| 8.5 through 8.5.1|

Workarounds and Mitigations

None

EPSS

0.071

Percentile

94.0%

Related for 30D2B7728CD06B10CA0EA1966F959EFC5FC02648B51A4446148CDFC70FF37FEB