Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ibmIBMB667E3D9390E85C117F5CC01B897A666F73B53F1B38A735C2523D3F70CB052A6
HistoryJul 25, 2019 - 3:55 p.m.

Security Bulletin: A vulnerability in IBM Java SDK and IBM Java Runtime affect Rational Asset Analyzer.

2019-07-2515:55:02
www.ibm.com
15

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

JSON

Summary

A vulnerability in IBM® SDK Java™ Technology Edition, Version 8.0.5.30 and IBM® Runtime Environment Java™ Version 8.0.5.30 used by Rational Asset Analyzer. Rational Asset Analyzer has addressed the applicable CVEs.

Vulnerability Details

CVEID: CVE-2019-2602 DESCRIPTION: An unspecified vulnerability in Oracle Java SE related to the Java SE, Java SE Embedded Libraries component could allow an unauthenticated attacker to cause a denial of service resulting in a high availability impact using unknown attack vectors.
CVSS Base Score: 7.5
CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/159698&gt; for the current score
CVSS Environmental Score*: Undefined
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)

Affected Products and Versions

Affected Versions Affected Versions
Rational Asset Analyzer 6.1.0.1 - 6.1.0.20

Remediation/Fixes

Product VRMF APAR Remediation / First Fix
Rational Asset Analyzer 6.1.0.21 None RAA 6.1.0.21

Related

veracode 4
ibm 64
debiancve 1
redhatcve 1
prion 1
cve 1
ubuntucve 1
alpinelinux 1
nessus 65
suse 4
openvas 19
centos 5
oraclelinux 7
redhat 12
debian 2
amazon 3
osv 2
mageia 1
f5 1
ubuntu 1
aix 1
kaspersky 1
photon 1
veracode
veracode
Denial Of Service (DoS)
2019-05-16 04:17:27
Denial Of Service (DoS)
2019-05-16 03:59:48
Denial Of Service (DoS)
2019-05-16 03:38:59
ibm
ibm
Security Bulletin: The IBM Runtime Environment Java Version 8 used by Transparent Cloud Tiering has a vulnerability which disclosed as part of the IBM Java SDK updates in April 2019
2019-07-10 12:40:01
Security Bulletin: A vulnerability in Java affects the IBM FlashSystem 840 and 900
2023-02-18 01:45:50
Security Bulletin: A Vulnerability in Java affects the IBM FlashSystem models V840 and V9000
2019-10-09 17:11:49
debiancve
debiancve
CVE-2019-2602
2019-04-23 19:32:00
redhatcve
redhatcve
CVE-2019-2602
2019-10-10 05:44:58
prion
prion
Code injection
2019-04-23 19:32:00
cve
cve
CVE-2019-2602
2019-04-23 19:32:00
ubuntucve
ubuntucve
CVE-2019-2602
2019-04-23 00:00:00
alpinelinux
alpinelinux
CVE-2019-2602
2019-04-23 19:32:00
nessus
nessus
CentOS 7 : java-11-openjdk (CESA-2019:0778)
2019-04-22 00:00:00
openSUSE Security Update : java-11-openjdk (openSUSE-2019-1327)
2019-05-06 00:00:00
SUSE SLED15 / SLES15 Security Update : java-11-openjdk (SUSE-SU-2019:1052-1)
2019-04-29 00:00:00
suse
suse
Security update for java-11-openjdk (moderate)
2019-05-04 00:00:00
Security update for java-1_8_0-openjdk (important)
2019-05-23 00:00:00
Security update for java-1_7_0-openjdk (moderate)
2019-06-03 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for java-1.7.0-openjdk (EulerOS-SA-2019-1759)
2020-01-23 00:00:00
openSUSE: Security Advisory for java-11-openjdk (openSUSE-SU-2019:1327-1)
2019-05-05 00:00:00
Oracle Java SE Security Updates (apr2019-5072813) 03 - Linux
2019-04-18 00:00:00
centos
centos
java security update
2019-04-19 18:39:15
java security update
2019-04-19 18:51:58
java security update
2019-04-19 18:53:44
oraclelinux
oraclelinux
java-11-openjdk security update
2019-04-17 00:00:00
java-11-openjdk security update
2019-07-30 00:00:00
java-1.8.0-openjdk security update
2019-07-30 00:00:00
redhat
redhat
(RHSA-2019:1518) Moderate: java-11-openjdk security update
2019-06-18 16:34:36
(RHSA-2019:0778) Moderate: java-11-openjdk security update
2019-04-17 15:24:25
(RHSA-2019:0791) Important: java-1.7.0-openjdk security update
2019-04-22 13:42:43
debian
debian
[SECURITY] [DLA 1782-1] openjdk-7 security update
2019-05-10 16:39:02
[SECURITY] [DSA 4453-1] openjdk-8 security update
2019-05-29 21:15:56
amazon
amazon
Important: java-1.8.0-openjdk
2019-08-07 23:35:00
Important: java-1.7.0-openjdk
2019-05-16 21:42:00
Important: java-11-amazon-corretto
2019-06-11 23:21:00
osv
osv
openjdk-8 - security update
2019-05-29 00:00:00
openjdk-7 - security update
2019-05-10 00:00:00
mageia
mageia
Updated java-1.8.0-openjdk packages fix security vulnerability
2019-05-08 00:38:09
f5
f5
K07519400 : Java SE vulnerabilities CVE-2019-2602, CVE-2019-2698, CVE-2019-2945, and CVE-2019-2962
2022-06-10 00:00:00
ubuntu
ubuntu
OpenJDK vulnerabilities
2019-05-13 00:00:00
aix
aix
Multiple vulnerabilities in IBM Java SDK affect AIX
2019-06-28 13:47:27
kaspersky
kaspersky
KLA11470 Multiple vulnerabilities in Oracle Java SE
2019-04-16 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2019-0232
2019-05-09 00:00:00

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

JSON
Related for B667E3D9390E85C117F5CC01B897A666F73B53F1B38A735C2523D3F70CB052A6
veracode4ibm64debiancve1redhatcve1prion1cve1ubuntucve1alpinelinux1nessus65suse4openvas19centos5oraclelinux7redhat12debian2amazon3osv2mageia1f51ubuntu1aix1kaspersky1photon1