Security Bulletin: CVE-2020-2590 may affect IBM® SDK, Java™ Technology Edition

Summary

CVE-2020-2590 was disclosed as part of the Oracle January 2020 Critical Patch Update.

Vulnerability Details

CVEID:CVE-2020-2590
**DESCRIPTION:**An unspecified vulnerability in Java SE related to the Java SE Security component could allow an unauthenticated attacker to cause no confidentiality impact, low integrity impact, and no availability impact.
CVSS Base score: 3.7
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/174538 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)

Affected Products and Versions

7.0.0.0 - 7.0.10.65
7.1.0.0 - 7.1.4.65
8.0.0.0 - 8.0.6.11

Remediation/Fixes

7.0.10.70
7.1.4.70
8.0.6.15

APAR: IJ26764

Workarounds and Mitigations

None