CVE-2018-1656
20.08.2018, 21:29
The IBM Java Runtime Environment's Diagnostic Tooling Framework for Java (DTFJ) (IBM SDK, Java Technology Edition 6.0 , 7.0, and 8.0) does not protect against path traversal attacks when extracting compressed dump files. IBM X-Force ID: 144882.
| Vendor | Product | Version |
|---|---|---|
| ibm | sdk | 6.0 |
| ibm | sdk | 7.0 |
| ibm | sdk | 8.0 |
| redhat | satellite | 5.6 |
| redhat | satellite | 5.7 |
| redhat | satellite | 5.8 |
| redhat | enterprise_linux_desktop | 6.0 |
| redhat | enterprise_linux_desktop | 7.0 |
| redhat | enterprise_linux_server | 6.0 |
| redhat | enterprise_linux_server | 7.0 |
| redhat | enterprise_linux_workstation | 6.0 |
| redhat | enterprise_linux_workstation | 7.0 |
| oracle | enterprise_manager_base_platform | 13.2.0.0.0 |
| oracle | enterprise_manager_base_platform | 13.3.0.0.0 |
𝑥
= Vulnerable software versions
Ubuntu Releases
References