IBMDBEFE73D8EE59160B86C646BCEFECE402430694EEE042811C3A8536943F5878FSecurity Bulletin: A vulnerability in IBM Java Runtime affects IBM SPSS Statistics
6.8 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
Summary
There is a vulnerability in IBM® Runtime Environment Java™ Versions 7.0, 7.1, and 8.0 used by IBM SPSS Statistics. IBM SPSS Statistics has addressed the applicable CVEs.
Vulnerability Details
CVEID:CVE-2020-2601
**DESCRIPTION:**An unspecified vulnerability in Oracle Java SE related to the Java SE, Java SE Embedded Security component could allow an unauthenticated attacker to obtain sensitive information resulting in a high confidentiality impact using unknown attack vectors.
CVSS Base score: 6.8
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/174548 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N)
Affected Products and Versions
| Affected Product(s) | Version(s) |
|---|---|
| SPSS Statistics | 27.0 |
| SPSS Statistics | 26.0 |
| SPSS Statistics | 25.0 |
| SPSS Statistics | 24.0 |
| SPSS Statistics | 23.0 |
Remediation/Fixes
| Affected Products | Versions | Fixes |
|---|---|---|
| SPSS Statistics | 27.0 | Install Statistics 27 GA-IF003 |
| SPSS Statistics | 26.0 | Install Statistics 26 FP001-IF009 |
| SPSS Statistics | 25.0 | Install Statistics 25 FP002-IF010 |
| SPSS Statistics | 24.0 | Install Statistics 24 FP002-IF023 |
| SPSS Statistics | 23.0 | Install Statistics 23 FP003-IF021 |
Workarounds and Mitigations
None
Related
6.8 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N