CVE-2014-8892
06.03.2015, 23:59
Unspecified vulnerability in the Java Virtual Machine (JVM) in IBM SDK, Java Technology Edition 5.0 before SR16-FP9, 6 before SR16-FP3, 6R1 before SR8-FP3, 7 before SR8-FP10, and 7R1 before SR2-FP10 allows remote attackers to bypass intended access permissions and obtain sensitive information via unspecified vectors related to the security manager.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| ibm | java_sdk | 5.0.0.0 ≤ 𝑥 ≤ 5.0.16.8 |
| ibm | java_sdk | 6.0.0.0 ≤ 𝑥 < 6.0.16.3 |
| ibm | java_sdk | 6.1.0.0 ≤ 𝑥 ≤ 6.1.8.2 |
| ibm | java_sdk | 7.0.0.0 ≤ 𝑥 < 7.0.8.10 |
| ibm | java_sdk | 7.1.0.0 ≤ 𝑥 < 7.1.2.10 |
𝑥
= Vulnerable software versions
Red Hat Enterprise Linux Releases
Red Hat Product | |||||
|---|---|---|---|---|---|
| java-1.5.0-ibm |
| ||||
| java-1.5.0-ibm-demo |
| ||||
| java-1.5.0-ibm-devel |
| ||||
| java-1.5.0-ibm-javacomm |
| ||||
| java-1.5.0-ibm-jdbc |
| ||||
| java-1.5.0-ibm-plugin |
| ||||
| java-1.5.0-ibm-src |
| ||||
| java-1.6.0-ibm |
| ||||
| java-1.6.0-ibm-demo |
| ||||
| java-1.6.0-ibm-devel |
| ||||
| java-1.6.0-ibm-javacomm |
| ||||
| java-1.6.0-ibm-jdbc |
| ||||
| java-1.6.0-ibm-plugin |
| ||||
| java-1.6.0-ibm-src |
| ||||
| java-1.7.1-ibm |
| ||||
| java-1.7.1-ibm-demo |
| ||||
| java-1.7.1-ibm-devel |
| ||||
| java-1.7.1-ibm-jdbc |
| ||||
| java-1.7.1-ibm-plugin |
| ||||
| java-1.7.1-ibm-src |
|
References