CVE-2012-4820

Fixed in a distro release EPSS 5%

Unspecified vulnerability in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 SR14 and earlier, and Java 142 SR13 FP13 and earlier; as used in IBM Rational Host On-Demand, Rational Change, Tivoli Monitoring, Smart Analytics System 5600, Tivoli Remote Control 5.1.2, WebSphere Real Time, Lotus Notes & Domino, Tivoli Storage Productivity Center, and Service Deliver Manager; and other products from other vendors such as Red Hat, when running under a security manager, allows remote attackers to gain privileges by modifying or removing the security manager via vectors related to "insecure use of the java.lang.reflect.Method invoke() method."

Published 2013-01-11 · CVE record · OSV

Products: ibm java, ibm lotus_domino, ibm lotus_notes, ibm lotus_notes_sametime, ibm lotus_notes_traveler, ibm rational_change, ibm rational_host_on-demand, ibm service_delivery_manager, ibm smart_analytics_system_5600_software, ibm tivoli_monitoring, ibm tivoli_remote_control, ibm websphere_real_time, tivoli_storage_productivity_center 5.0, tivoli_storage_productivity_center 5.1, tivoli_storage_productivity_center 5.1.1

Distro releases