IBM Runtime Environment, Java Technology Edition IBMJCEPlus and JSSE 8.0.7.0 through 8.0.7.11 components could expose sensitive information using a combination of flaws and configurations. IBM X-Force ID: 253188.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade java-1.8.0-ibm-headlessUpgrade java-1.8.0-ibm-develUpgrade java-1.8.0-ibm-jdbcUpgrade java-1.8.0-ibm-pluginUpgrade java-1.8.0-ibmUpgrade java-1.8.0-ibm-webstartUpgrade java-1.8.0-ibm-srcUpgrade java-1.8.0-ibm-demo | Apr 24, 2023 | Oct 25, 2022 |
| Ibm Aix | — | Apply the fix or workaround for java_may2023_advisory | Jul 27, 2023 | Apr 29, 2023 |
| Ibm Java | — | Upgrade IBM Java to version 8.0.7.15 | Apr 29, 2023 | Apr 29, 2023 |
| Ibm Was | — | Upgrade to minimal fix pack levels as required by interim fixes and then apply latest Interim Fix. | Jul 27, 2023 | Apr 29, 2023 |
| Redhat_linux | — | Upgrade java-1.8.0-ibm-develUpgrade java-1.8.0-ibm-jdbcUpgrade java-1.8.0-ibmUpgrade java-1.8.0-ibm-demoUpgrade java-1.8.0-ibm-headlessUpgrade java-1.8.0-ibm-webstartUpgrade java-1.8.0-ibm-srcUpgrade java-1.8.0-ibm-plugin | Apr 24, 2023 | Oct 25, 2022 |
| Suse | — | Upgrade java-1_8_0-ibmUpgrade java-1_8_0-ibm-pluginUpgrade java-1_8_0-ibm-srcUpgrade java-1_8_0-ibm-demoUpgrade java-1_8_0-ibm-develUpgrade java-1_8_0-ibm-devel-32bitUpgrade java-1_8_0-ibm-32bitUpgrade java-1_8_0-ibm-alsa | Jun 12, 2023 | Apr 29, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub