FKIE_CVE-2014-0878

Vulnerability from fkie_nvd - Published: 2014-05-26 19:55 - Updated: 2026-06-17 00:03
Severity
Summary
The IBMSecureRandom component in the IBMJCE and IBMSecureRandom cryptographic providers in IBM SDK Java Technology Edition 5.0 before Service Refresh 16 FP6, 6 before Service Refresh 16, 6.0.1 before Service Refresh 8, 7 before Service Refresh 7, and 7R1 before Service Refresh 1 makes it easier for context-dependent attackers to defeat cryptographic protection mechanisms by predicting the random number generator's output.
References
psirt@us.ibm.comhttp://secunia.com/advisories/59022
psirt@us.ibm.comhttp://secunia.com/advisories/59023
psirt@us.ibm.comhttp://secunia.com/advisories/59058
psirt@us.ibm.comhttp://secunia.com/advisories/61264
psirt@us.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=swg21672043Vendor Advisory
psirt@us.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=swg21673836
psirt@us.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=swg21674539
psirt@us.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=swg21676672
psirt@us.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=swg21676703
psirt@us.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=swg21676746
psirt@us.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=swg21679610
psirt@us.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=swg21679713
psirt@us.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=swg21680750
psirt@us.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=swg21681256
psirt@us.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=swg21683484
psirt@us.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=swg21686717Vendor Advisory
psirt@us.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=swg21689593Vendor Advisory
psirt@us.ibm.comhttp://www.ibm.com/support/docview.wss?uid=swg21675343
psirt@us.ibm.comhttp://www.ibm.com/support/docview.wss?uid=swg21675588
psirt@us.ibm.comhttp://www.ibm.com/support/docview.wss?uid=swg21677387
psirt@us.ibm.comhttp://www.securityfocus.com/bid/67601
psirt@us.ibm.comhttps://exchange.xforce.ibmcloud.com/vulnerabilities/91084
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/59022
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/59023
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/59058
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/61264
af854a3a-2127-422b-91ae-364da2661108http://www-01.ibm.com/support/docview.wss?uid=swg21672043Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://www-01.ibm.com/support/docview.wss?uid=swg21673836
af854a3a-2127-422b-91ae-364da2661108http://www-01.ibm.com/support/docview.wss?uid=swg21674539
af854a3a-2127-422b-91ae-364da2661108http://www-01.ibm.com/support/docview.wss?uid=swg21676672
af854a3a-2127-422b-91ae-364da2661108http://www-01.ibm.com/support/docview.wss?uid=swg21676703
af854a3a-2127-422b-91ae-364da2661108http://www-01.ibm.com/support/docview.wss?uid=swg21676746
af854a3a-2127-422b-91ae-364da2661108http://www-01.ibm.com/support/docview.wss?uid=swg21679610
af854a3a-2127-422b-91ae-364da2661108http://www-01.ibm.com/support/docview.wss?uid=swg21679713
af854a3a-2127-422b-91ae-364da2661108http://www-01.ibm.com/support/docview.wss?uid=swg21680750
af854a3a-2127-422b-91ae-364da2661108http://www-01.ibm.com/support/docview.wss?uid=swg21681256
af854a3a-2127-422b-91ae-364da2661108http://www-01.ibm.com/support/docview.wss?uid=swg21683484
af854a3a-2127-422b-91ae-364da2661108http://www-01.ibm.com/support/docview.wss?uid=swg21686717Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://www-01.ibm.com/support/docview.wss?uid=swg21689593Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://www.ibm.com/support/docview.wss?uid=swg21675343
af854a3a-2127-422b-91ae-364da2661108http://www.ibm.com/support/docview.wss?uid=swg21675588
af854a3a-2127-422b-91ae-364da2661108http://www.ibm.com/support/docview.wss?uid=swg21677387
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/67601
af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/91084
Impacted products
Vendor Product Version
ibm java_sdk 6.0.0.0
ibm java_sdk 6.0.1.0
ibm java_sdk 6.0.2.0
ibm java_sdk 6.0.3.0
ibm java_sdk 6.0.4.0
ibm java_sdk 6.0.5.0
ibm java_sdk 6.0.6.0
ibm java_sdk 6.0.7.0
ibm java_sdk 6.0.8.0
ibm java_sdk 6.0.8.1
ibm java_sdk 6.0.9.0
ibm java_sdk 6.0.9.1
ibm java_sdk 6.0.9.2
ibm java_sdk 6.0.10.0
ibm java_sdk 6.0.10.1
ibm java_sdk 6.0.11.0
ibm java_sdk 6.0.12.0
ibm java_sdk 6.0.13.0
ibm java_sdk 6.0.13.1
ibm java_sdk 6.0.13.2
ibm java_sdk 6.0.14.0
ibm java_sdk 6.0.15.0
ibm java_sdk 6.0.15.1
ibm java_sdk 5.0.0.0
ibm java_sdk 5.0.11.0
ibm java_sdk 5.0.11.1
ibm java_sdk 5.0.11.2
ibm java_sdk 5.0.12.0
ibm java_sdk 5.0.12.1
ibm java_sdk 5.0.12.2
ibm java_sdk 5.0.12.3
ibm java_sdk 5.0.12.4
ibm java_sdk 5.0.12.5
ibm java_sdk 5.0.13.0
ibm java_sdk 5.0.14.0
ibm java_sdk 5.0.15.0
ibm java_sdk 5.0.16.0
ibm java_sdk 5.0.16.1
ibm java_sdk 5.0.16.2
ibm java_sdk 5.0.16.3
ibm java_sdk 5.0.16.4
ibm java_sdk 5.0.16.5
ibm java_sdk 7.0.0.0
ibm java_sdk 7.0.1.0
ibm java_sdk 7.0.2.0
ibm java_sdk 7.0.3.0
ibm java_sdk 7.0.4.0
ibm java_sdk 7.0.4.1
ibm java_sdk 7.0.4.2
ibm java_sdk 7.0.5.0
ibm java_sdk 7.0.6.0
ibm java_sdk 7.0.6.1
ibm java_sdk 7.1.0.0

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "source": "psirt@us.ibm.com"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:ibm:java_sdk:6.0.0.0:*:*:*:technology:*:*:*",
              "matchCriteriaId": "7F64AE3A-3A3F-4F54-AEDD-0425A3F459D4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:java_sdk:6.0.1.0:*:*:*:technology:*:*:*",
              "matchCriteriaId": "A91376D6-0271-447B-83C6-C1CF94059718",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:java_sdk:6.0.2.0:*:*:*:technology:*:*:*",
              "matchCriteriaId": "E8DB8CF1-DFC6-4532-BCF0-86AE616AE145",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:java_sdk:6.0.3.0:*:*:*:technology:*:*:*",
              "matchCriteriaId": "68BA60FA-89F1-4CE7-8685-95C3E2FCFFC6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:java_sdk:6.0.4.0:*:*:*:technology:*:*:*",
              "matchCriteriaId": "F3A2FA81-5236-4D4F-A189-B7CCD3C1A89B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:java_sdk:6.0.5.0:*:*:*:technology:*:*:*",
              "matchCriteriaId": "4CAB76E6-07A6-42B5-9D4D-5E5BA4B39384",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:java_sdk:6.0.6.0:*:*:*:technology:*:*:*",
              "matchCriteriaId": "F7E16292-F6AC-4DA9-BEEC-9CF6D4C8D8F1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:java_sdk:6.0.7.0:*:*:*:technology:*:*:*",
              "matchCriteriaId": "84A9D30E-ADDF-43E3-BFC2-FB6F0704B359",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:java_sdk:6.0.8.0:*:*:*:technology:*:*:*",
              "matchCriteriaId": "EC06A0C3-1627-443B-98E3-5B40A1424E33",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:java_sdk:6.0.8.1:*:*:*:technology:*:*:*",
              "matchCriteriaId": "91C9ECDE-E94D-43A7-8FF4-ADDADCF88ABF",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:java_sdk:6.0.9.0:*:*:*:technology:*:*:*",
              "matchCriteriaId": "A3B11DD7-B251-4E8F-88A5-8EF3E49455B5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:java_sdk:6.0.9.1:*:*:*:technology:*:*:*",
              "matchCriteriaId": "52DEB343-EA20-4745-950C-E19AD553A519",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:java_sdk:6.0.9.2:*:*:*:technology:*:*:*",
              "matchCriteriaId": "B2A56764-8CF1-4098-AFCB-9A3E79A37298",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:java_sdk:6.0.10.0:*:*:*:technology:*:*:*",
              "matchCriteriaId": "F6C0E04C-BB7C-4D30-944F-AC3A32C9A870",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:java_sdk:6.0.10.1:*:*:*:technology:*:*:*",
              "matchCriteriaId": "EF7BD7D8-C909-48EE-8654-9A118184C0FE",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:java_sdk:6.0.11.0:*:*:*:technology:*:*:*",
              "matchCriteriaId": "68CB5F58-8526-4814-AAA2-85DB5508450C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:java_sdk:6.0.12.0:*:*:*:technology:*:*:*",
              "matchCriteriaId": "CBD2DCC3-972E-45F5-8F06-B7EE48BF417B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:java_sdk:6.0.13.0:*:*:*:technology:*:*:*",
              "matchCriteriaId": "3BB7005A-1C29-4A72-8559-F184738C66F4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:java_sdk:6.0.13.1:*:*:*:technology:*:*:*",
              "matchCriteriaId": "1B3E82B3-244F-4681-A0B0-A55201BD89BD",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:java_sdk:6.0.13.2:*:*:*:technology:*:*:*",
              "matchCriteriaId": "74A57DD9-B74A-4865-B321-00CB2FF2EDFF",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:java_sdk:6.0.14.0:*:*:*:technology:*:*:*",
              "matchCriteriaId": "0707BA71-C076-4C77-A6A7-5FA66BA14D32",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:java_sdk:6.0.15.0:*:*:*:technology:*:*:*",
              "matchCriteriaId": "3B123DE5-0F8F-4C23-8B0D-123C257070A7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:java_sdk:6.0.15.1:*:*:*:technology:*:*:*",
              "matchCriteriaId": "D615B5B1-9E33-4795-AE3D-579309DBF915",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:ibm:java_sdk:5.0.0.0:*:*:*:technology:*:*:*",
              "matchCriteriaId": "55B1372B-A99E-4F5F-85FB-7F7CB712A26D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:java_sdk:5.0.11.0:*:*:*:technology:*:*:*",
              "matchCriteriaId": "07DDF4C0-09A9-4CAB-88B3-0CEA3E377D0D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:java_sdk:5.0.11.1:*:*:*:technology:*:*:*",
              "matchCriteriaId": "FD77E636-7664-4EA7-AB69-BA77FC6BFC64",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:java_sdk:5.0.11.2:*:*:*:technology:*:*:*",
              "matchCriteriaId": "3E950BC9-28B4-4078-8FED-4766E6D17C96",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:java_sdk:5.0.12.0:*:*:*:technology:*:*:*",
              "matchCriteriaId": "45DA039D-D1A3-4FFA-9F37-52233FC8B8D3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:java_sdk:5.0.12.1:*:*:*:technology:*:*:*",
              "matchCriteriaId": "1538B3DC-D8A0-41BC-90BE-2DDC7E8A56B3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:java_sdk:5.0.12.2:*:*:*:technology:*:*:*",
              "matchCriteriaId": "86D14ED2-BB93-4445-94BF-89E42AA4D0C3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:java_sdk:5.0.12.3:*:*:*:technology:*:*:*",
              "matchCriteriaId": "3C154101-DF9A-47F8-813A-97FB4FD161FB",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:java_sdk:5.0.12.4:*:*:*:technology:*:*:*",
              "matchCriteriaId": "DF029E26-0FBD-40EB-AF68-F48C3FE31B03",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:java_sdk:5.0.12.5:*:*:*:technology:*:*:*",
              "matchCriteriaId": "93652A4D-C73D-43AA-ADC9-00E3FA2DA5AA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:java_sdk:5.0.13.0:*:*:*:technology:*:*:*",
              "matchCriteriaId": "40B5060F-5DED-49EF-913C-4C97737B8A20",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:java_sdk:5.0.14.0:*:*:*:technology:*:*:*",
              "matchCriteriaId": "99886E38-7DD1-4954-824D-C3B2B56557C0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:java_sdk:5.0.15.0:*:*:*:technology:*:*:*",
              "matchCriteriaId": "EBB58E8A-9FB4-4C26-A85A-5BC914EF7215",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:java_sdk:5.0.16.0:*:*:*:technology:*:*:*",
              "matchCriteriaId": "432A7930-462E-42C2-9E13-174374630C09",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:java_sdk:5.0.16.1:*:*:*:technology:*:*:*",
              "matchCriteriaId": "29827AD1-8C9C-4736-A931-79749A5DD25A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:java_sdk:5.0.16.2:*:*:*:technology:*:*:*",
              "matchCriteriaId": "010E25AA-20D4-4593-A6AD-25094D53F74B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:java_sdk:5.0.16.3:*:*:*:technology:*:*:*",
              "matchCriteriaId": "E8DF754E-E5A3-480F-9725-F8478A71D1C4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:java_sdk:5.0.16.4:*:*:*:technology:*:*:*",
              "matchCriteriaId": "D131E102-169F-42DA-AEFB-9650AF85A797",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:java_sdk:5.0.16.5:*:*:*:technology:*:*:*",
              "matchCriteriaId": "5F4CAE85-C253-4F95-81AE-A02BE48DCAA4",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:ibm:java_sdk:7.0.0.0:*:*:*:technology:*:*:*",
              "matchCriteriaId": "769131D3-A1FD-4404-9467-90D0F81F03D2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:java_sdk:7.0.1.0:*:*:*:technology:*:*:*",
              "matchCriteriaId": "AF8499A1-DCD7-49DF-BB75-92CD80167994",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:java_sdk:7.0.2.0:*:*:*:technology:*:*:*",
              "matchCriteriaId": "2E6EEC1B-EB35-46AE-B6DD-1239037C008F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:java_sdk:7.0.3.0:*:*:*:technology:*:*:*",
              "matchCriteriaId": "29F18878-B335-4AE6-A28F-3DC47E101BCB",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:java_sdk:7.0.4.0:*:*:*:technology:*:*:*",
              "matchCriteriaId": "96899A64-B537-4E41-BD83-1C4B0B06E58C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:java_sdk:7.0.4.1:*:*:*:technology:*:*:*",
              "matchCriteriaId": "AD53244F-CF3A-4470-9A6D-A9F6AACC4363",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:java_sdk:7.0.4.2:*:*:*:technology:*:*:*",
              "matchCriteriaId": "E468E9EA-4742-41CC-855C-5DF868A06E23",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:java_sdk:7.0.5.0:*:*:*:technology:*:*:*",
              "matchCriteriaId": "7DA12A25-D63C-4CBB-96F0-23E0A704E0B9",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:java_sdk:7.0.6.0:*:*:*:technology:*:*:*",
              "matchCriteriaId": "C1ABEDB5-3068-448B-97CF-6532FE8DFDFA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:java_sdk:7.0.6.1:*:*:*:technology:*:*:*",
              "matchCriteriaId": "8E57A38C-BD43-4FD4-B5D8-E6069D5F1A24",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:java_sdk:7.1.0.0:*:*:*:technology:*:*:*",
              "matchCriteriaId": "52300B0C-9B55-47DD-8240-099845A8A402",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "The IBMSecureRandom component in the IBMJCE and IBMSecureRandom cryptographic providers in IBM SDK Java Technology Edition 5.0 before Service Refresh 16 FP6, 6 before Service Refresh 16, 6.0.1 before Service Refresh 8, 7 before Service Refresh 7, and 7R1 before Service Refresh 1 makes it easier for context-dependent attackers to defeat cryptographic protection mechanisms by predicting the random number generator\u0027s output."
    },
    {
      "lang": "es",
      "value": "El componente IBMSecureRandom en los proveedores criptogr\u00e1ficos IBMJCE y IBMSecureRandom en IBM SDK Java Technology Edition 5.0 anterior a Service Refresh 16 FP6, 6 anterior a Service Refresh 16, 6.0.1 anterior a Service Refresh 8, 7 anterior a Service Refresh 7 y 7R1 anterior a Service Refresh 1 facilita a atacantes dependientes de contexto anular mecanismos de protecci\u00f3n criptogr\u00e1ficos mediante la predicci\u00f3n de la salida del generador de n\u00fameros aleatorias."
    }
  ],
  "id": "CVE-2014-0878",
  "lastModified": "2026-06-17T00:03:48.143",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "MEDIUM",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "NONE",
          "baseScore": 5.8,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
          "version": "2.0"
        },
        "exploitabilityScore": 8.6,
        "impactScore": 4.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2014-05-26T19:55:04.263",
  "references": [
    {
      "source": "psirt@us.ibm.com",
      "url": "http://secunia.com/advisories/59022"
    },
    {
      "source": "psirt@us.ibm.com",
      "url": "http://secunia.com/advisories/59023"
    },
    {
      "source": "psirt@us.ibm.com",
      "url": "http://secunia.com/advisories/59058"
    },
    {
      "source": "psirt@us.ibm.com",
      "url": "http://secunia.com/advisories/61264"
    },
    {
      "source": "psirt@us.ibm.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21672043"
    },
    {
      "source": "psirt@us.ibm.com",
      "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21673836"
    },
    {
      "source": "psirt@us.ibm.com",
      "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21674539"
    },
    {
      "source": "psirt@us.ibm.com",
      "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21676672"
    },
    {
      "source": "psirt@us.ibm.com",
      "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21676703"
    },
    {
      "source": "psirt@us.ibm.com",
      "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21676746"
    },
    {
      "source": "psirt@us.ibm.com",
      "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21679610"
    },
    {
      "source": "psirt@us.ibm.com",
      "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21679713"
    },
    {
      "source": "psirt@us.ibm.com",
      "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21680750"
    },
    {
      "source": "psirt@us.ibm.com",
      "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21681256"
    },
    {
      "source": "psirt@us.ibm.com",
      "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21683484"
    },
    {
      "source": "psirt@us.ibm.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21686717"
    },
    {
      "source": "psirt@us.ibm.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21689593"
    },
    {
      "source": "psirt@us.ibm.com",
      "url": "http://www.ibm.com/support/docview.wss?uid=swg21675343"
    },
    {
      "source": "psirt@us.ibm.com",
      "url": "http://www.ibm.com/support/docview.wss?uid=swg21675588"
    },
    {
      "source": "psirt@us.ibm.com",
      "url": "http://www.ibm.com/support/docview.wss?uid=swg21677387"
    },
    {
      "source": "psirt@us.ibm.com",
      "url": "http://www.securityfocus.com/bid/67601"
    },
    {
      "source": "psirt@us.ibm.com",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/91084"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/59022"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/59023"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/59058"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/61264"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21672043"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21673836"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21674539"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21676672"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21676703"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21676746"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21679610"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21679713"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21680750"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21681256"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21683484"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21686717"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21689593"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.ibm.com/support/docview.wss?uid=swg21675343"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.ibm.com/support/docview.wss?uid=swg21675588"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.ibm.com/support/docview.wss?uid=swg21677387"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/67601"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/91084"
    }
  ],
  "sourceIdentifier": "psirt@us.ibm.com",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-310"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Loading…

Detection rules are retrieved from Rulezet.

Loading…

Loading…

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.


Loading…