CVE-2012-4820

Published: Jan 11, 2013Modified: Apr 29, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

Unspecified vulnerability in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 SR14 and earlier, and Java 142 SR13 FP13 and earlier; as used in IBM Rational Host On-Demand, Rational Change, Tivoli Monitoring, Smart Analytics System 5600, Tivoli Remote Control 5.1.2, WebSphere Real Time, Lotus Notes & Domino, Tivoli Storage Productivity Center, and Service Deliver Manager; and other products from other vendors such as Red Hat, when running under a security manager, allows remote attackers to gain privileges by modifying or removing the security manager via vectors related to "insecure use of the java.lang.reflect.Method invoke() method."

Affected (128)

Products: Ibm: Java, Lotus Domino, Lotus Notes, Lotus Notes Sametime, Lotus Notes Traveler, Rational Change, Rational Host On Demand, Service Delivery Manager, Smart Analytics System 5600, Smart Analytics System 5600 Software, Tivoli Monitoring, Tivoli Remote Control, Websphere Real Time · Tivoli Storage Productivity Center: 5.0, 5.1, 5.1.1

13 products

Rational Host On Demand

Service Delivery Manager

Smart Analytics System 5600

Smart Analytics System 5600 Software

Tivoli Monitoring

Tivoli Remote Control

Websphere Real Time

Tivoli Storage Productivity Center

3 products

5.0

5.1

5.1.1

Configuration A

128 vulnerable

Vulnerable Software	Affected Versions
Ibm Java	From 1.4.2 to 1.4.2.13.13
Ibm Java	From 5.0.0.0 to 5.0.14.0
Ibm Java	From 6.0.0.0 to 6.0.11.0
Ibm Java	From 7.0.0.0 to 7.0.2.0
Ibm Lotus Domino	Version 8.0.1
Ibm Lotus Domino	Version 8.0.2.1
Ibm Lotus Domino	Version 8.0.2.2
Ibm Lotus Domino	Version 8.0.2.3
Ibm Lotus Domino	Version 8.0.2.4
Ibm Lotus Domino	Version 8.0.2
Ibm Lotus Domino	Version 8.0
Ibm Lotus Domino	Version 8.5.0.1
Ibm Lotus Domino	Version 8.5.0
Ibm Lotus Domino	Version 8.5.1.1
Ibm Lotus Domino	Version 8.5.1.2
Ibm Lotus Domino	Version 8.5.1.3
Ibm Lotus Domino	Version 8.5.1.4
Ibm Lotus Domino	Version 8.5.1.5
Ibm Lotus Domino	Version 8.5.1
Ibm Lotus Domino	Version 8.5.2.0
Ibm Lotus Domino	Version 8.5.2.1
Ibm Lotus Domino	Version 8.5.2.2
Ibm Lotus Domino	Version 8.5.2.3
Ibm Lotus Domino	Version 8.5.2.4
Ibm Lotus Domino	Version 8.5.3.0
Ibm Lotus Domino	Version 8.5.3.1
Ibm Lotus Domino	Version 8.5.3.2
Ibm Lotus Notes	Version 8.0.0
Ibm Lotus Notes	Version 8.0.1
Ibm Lotus Notes	Version 8.0.2.0
Ibm Lotus Notes	Version 8.0.2.1
Ibm Lotus Notes	Version 8.0.2.2
Ibm Lotus Notes	Version 8.0.2.3
Ibm Lotus Notes	Version 8.0.2.4
Ibm Lotus Notes	Version 8.0.2.5
Ibm Lotus Notes	Version 8.0.2.6
Ibm Lotus Notes	Version 8.0.2
Ibm Lotus Notes	Version 8.0
Ibm Lotus Notes	Version 8.5.0.0
Ibm Lotus Notes	Version 8.5.0.1
Ibm Lotus Notes	Version 8.5.1.0
Ibm Lotus Notes	Version 8.5.1.1
Ibm Lotus Notes	Version 8.5.1.2
Ibm Lotus Notes	Version 8.5.1.3
Ibm Lotus Notes	Version 8.5.1.4
Ibm Lotus Notes	Version 8.5.1.5
Ibm Lotus Notes	Version 8.5.1
Ibm Lotus Notes	Version 8.5.2.0
Ibm Lotus Notes	Version 8.5.2.1
Ibm Lotus Notes	Version 8.5.2.2
Ibm Lotus Notes	Version 8.5.2.3
Ibm Lotus Notes	Version 8.5.3.1
Ibm Lotus Notes	Version 8.5.3.2
Ibm Lotus Notes	Version 8.5.3
Ibm Lotus Notes	Version 8.5.4
Ibm Lotus Notes	Version 8.5
Ibm Lotus Notes Sametime	Version 8.0.80407
Ibm Lotus Notes Sametime	Version 8.0.80822
Ibm Lotus Notes Sametime	Version 8.5.1.20100709-1631
Ibm Lotus Notes Traveler	Version 8.0.1.2
Ibm Lotus Notes Traveler	Version 8.0.1.3
Ibm Lotus Notes Traveler	Version 8.0.1
Ibm Lotus Notes Traveler	Version 8.0
Ibm Lotus Notes Traveler	Version 8.5.0.0
Ibm Lotus Notes Traveler	Version 8.5.0.1
Ibm Lotus Notes Traveler	Version 8.5.0.2
Ibm Lotus Notes Traveler	Version 8.5.1.1
Ibm Lotus Notes Traveler	Version 8.5.1.2
Ibm Lotus Notes Traveler	Version 8.5.1.3
Ibm Lotus Notes Traveler	Version 8.5.2.1
Ibm Lotus Notes Traveler	Version 8.5.3.1
Ibm Lotus Notes Traveler	Version 8.5.3.2
Ibm Lotus Notes Traveler	Version 8.5.3.3
Ibm Lotus Notes Traveler	Version 8.5.3.3 interim_fix_1
Ibm Lotus Notes Traveler	Version 8.5.3
Ibm Rational Change	Version 4.7
Ibm Rational Change	Version 5.1
Ibm Rational Change	Version 5.2
Ibm Rational Change	Version 5.3
Ibm Rational Host On Demand	Version 1.6.0.12
Ibm Rational Host On Demand	Version 10.0.10.0
Ibm Rational Host On Demand	Version 10.0.9.0
Ibm Rational Host On Demand	Version 11.0.3.0
Ibm Rational Host On Demand	Version 11.0.4.0
Ibm Rational Host On Demand	Version 11.0.5.0
Ibm Rational Host On Demand	Version 11.0.5.1
Ibm Rational Host On Demand	Version 11.0.6.0
Ibm Rational Host On Demand	Version 11.0.6.1
Ibm Rational Host On Demand	Version 8.0.8.0
Ibm Rational Host On Demand	Version 9.0.8.0
Ibm Service Delivery Manager	Version 7.2.1.0
Ibm Service Delivery Manager	Version 7.2.2.0
Ibm Smart Analytics System 5600	Version 7200
Ibm Smart Analytics System 5600 Software	All versions
Ibm Smart Analytics System 5600 Software	Version 9.7
Ibm Tivoli Monitoring	Version 6.1.0.7
Ibm Tivoli Monitoring	Version 6.1.0
Ibm Tivoli Monitoring	Version 6.2.0.1
Ibm Tivoli Monitoring	Version 6.2.0.2
Ibm Tivoli Monitoring	Version 6.2.0.3
Ibm Tivoli Monitoring	Version 6.2.0
Ibm Tivoli Monitoring	Version 6.2.1.0
Ibm Tivoli Monitoring	Version 6.2.1.1
Ibm Tivoli Monitoring	Version 6.2.1.2
Ibm Tivoli Monitoring	Version 6.2.1.3
Ibm Tivoli Monitoring	Version 6.2.1.4
Ibm Tivoli Monitoring	Version 6.2.1
Ibm Tivoli Monitoring	Version 6.2.2.0
Ibm Tivoli Monitoring	Version 6.2.2.1
Ibm Tivoli Monitoring	Version 6.2.2.2
Ibm Tivoli Monitoring	Version 6.2.2.3
Ibm Tivoli Monitoring	Version 6.2.2.4
Ibm Tivoli Monitoring	Version 6.2.2.5
Ibm Tivoli Monitoring	Version 6.2.2.6
Ibm Tivoli Monitoring	Version 6.2.2.7
Ibm Tivoli Monitoring	Version 6.2.2.8
Ibm Tivoli Monitoring	Version 6.2.2.9
Ibm Tivoli Monitoring	Version 6.2.2
Ibm Tivoli Monitoring	Version 6.2.3.0
Ibm Tivoli Monitoring	Version 6.2.3.1
Ibm Tivoli Monitoring	Version 6.2.3.2
Ibm Tivoli Monitoring	Version 6.2.3
Ibm Tivoli Remote Control	Version 5.1.2
Ibm Websphere Real Time	Version 2.0
Ibm Websphere Real Time	Version 3.0
Tivoli Storage Productivity Center 5.0	All versions
Tivoli Storage Productivity Center 5.1	All versions
Tivoli Storage Productivity Center 5.1.1	All versions

References (50)

http://rhn.redhat.com/errata/RHSA-2012-1465.html

Source: psirt@us.ibm.com

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2012-1466.html

Source: psirt@us.ibm.com

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2012-1467.html

Source: psirt@us.ibm.com

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2013-1455.html

Source: psirt@us.ibm.com

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2013-1456.html

Source: psirt@us.ibm.com

Third Party Advisory

http://seclists.org/bugtraq/2012/Sep/38

Source: psirt@us.ibm.com

Mailing ListThird Party Advisory

http://secunia.com/advisories/51326

Source: psirt@us.ibm.com

Third Party Advisory

http://secunia.com/advisories/51327

Source: psirt@us.ibm.com

Third Party Advisory

http://secunia.com/advisories/51328

Source: psirt@us.ibm.com

Third Party Advisory

http://secunia.com/advisories/51393

Source: psirt@us.ibm.com

Third Party Advisory

http://secunia.com/advisories/51634

Source: psirt@us.ibm.com

Third Party Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg1IV29654

Source: psirt@us.ibm.com

Vendor Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg21615705

Source: psirt@us.ibm.com

Vendor Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg21615800

Source: psirt@us.ibm.com

Vendor Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg21616490

Source: psirt@us.ibm.com

Vendor Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg21616594

Source: psirt@us.ibm.com

Vendor Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg21616616

Source: psirt@us.ibm.com

Vendor Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg21616617

Source: psirt@us.ibm.com

Vendor Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg21616652

Source: psirt@us.ibm.com

Vendor Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg21616708

Source: psirt@us.ibm.com

Vendor Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg21621154

Source: psirt@us.ibm.com

Vendor Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg21631786

Source: psirt@us.ibm.com

Vendor Advisory

http://www.securityfocus.com/bid/55495

Source: psirt@us.ibm.com

Third Party AdvisoryVDB Entry

https://exchange.xforce.ibmcloud.com/vulnerabilities/78764

Source: psirt@us.ibm.com

Third Party AdvisoryVDB Entry

https://www-304.ibm.com/support/docview.wss?uid=swg21616546

Source: psirt@us.ibm.com

Vendor Advisory

http://rhn.redhat.com/errata/RHSA-2012-1465.html