The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The IBMSecureRandom component in the IBMJCE and IBMSecureRandom cryptographic providers in IBM SDK Java Technology Edition 5.0 before Service Refresh 16 FP6, 6 before Service Refresh 16, 6.0.1 before Service Refresh 8, 7 before Service Refresh 7, and 7R1 before Service Refresh 1 makes it easier for context-dependent attackers to defeat cryptographic protection mechanisms by predicting the random number generator's output.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Ibm Aix | — | Apply the fix or workaround for java_apr2014_advisory | Nov 30, 2017 | May 26, 2014 |
| Ibm Was | — | Upgrade to minimal fix pack levels as required by interim fixes and then apply latest Interim Fix. | Apr 27, 2018 | Mar 31, 2016 |
| Suse | — | Upgrade java-1_6_0-ibm-alsaUpgrade java-1_6_0-ibm-jdbcUpgrade java-1_7_0-ibm-develUpgrade java-1_6_0-ibm-pluginUpgrade java-1_7_0-ibm-alsaUpgrade java-1_6_0-ibm-develUpgrade java-1_7_0-ibm-pluginUpgrade java-1_7_0-ibmUpgrade java-1_6_0-ibm-fontsUpgrade java-1_6_0-ibmUpgrade java-1_7_0-ibm-jdbc | Dec 18, 2015 | May 26, 2014 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub