IBM SDK, Java Technology Edition 7.1.5.18 and 8.0.8.0 could allow a remote attacker to execute arbitrary code on the system, caused by an unsafe deserialization flaw. By sending specially-crafted data, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 236069.
CVSS Details
- CVSS 3.1 Base Score: 8.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade java-1.8.0-ibm-pluginUpgrade java-1.8.0-ibm-srcUpgrade java-1.8.0-ibm-demoUpgrade java-1.8.0-ibmUpgrade java-1.8.0-ibm-jdbcUpgrade java-1.8.0-ibm-devel | Aug 8, 2023 | Aug 2, 2023 |
| Ibm Aix | — | Apply the fix or workaround for java_aug2023_advisory | Sep 4, 2023 | Aug 2, 2023 |
| Ibm Java | — | Upgrade IBM Java to version 7.1.5.19Upgrade IBM Java to version 8.0.8.5 | Aug 2, 2023 | Aug 2, 2023 |
| Ibm Was | — | Upgrade to minimal fix pack levels as required by interim fixes and then apply latest Interim Fix. | Jun 3, 2024 | Aug 2, 2023 |
| Redhat_linux | — | Upgrade java-1.8.0-ibm-demoUpgrade java-1.8.0-ibm-pluginUpgrade java-1.8.0-ibmUpgrade java-1.8.0-ibm-jdbcUpgrade java-1.8.0-ibm-headlessUpgrade java-1.8.0-ibm-develNo solution existsUpgrade java-1.8.0-ibm-srcUpgrade java-1.8.0-ibm-webstart | Aug 8, 2023 | Aug 2, 2023 |
| Suse | — | Upgrade java-1_8_0-ibmUpgrade java-1_8_0-ibm-demoUpgrade java-1_8_0-ibm-pluginUpgrade java-1_8_0-ibm-32bitUpgrade java-1_8_0-ibm-develUpgrade java-1_8_0-ibm-srcUpgrade java-1_8_0-ibm-devel-32bitUpgrade java-1_8_0-ibm-alsa | Aug 24, 2023 | Aug 2, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub