The IBMSecureRandom component in the IBMJCE and IBMSecureRandom cryptographic providers in IBM SDK Java Technology Edition 5.0 before Service Refresh 16 FP6, 6 before Service Refresh 16, 6.0.1 before Service Refresh 8, 7 before Service Refresh 7, and 7R1 before Service Refresh 1 makes it easier for context-dependent attackers to defeat cryptographic protection mechanisms by predicting the random number generator's output.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Ibm Aix | — | Apply the fix or workaround for java_apr2014_advisory | Nov 30, 2017 | May 26, 2014 |
| Ibm Was | — | Upgrade to minimal fix pack levels as required by interim fixes and then apply latest Interim Fix. | Apr 27, 2018 | May 26, 2014 |
| Suse | — | Upgrade java-1_6_0-ibm-alsaUpgrade java-1_7_0-ibm-develUpgrade java-1_6_0-ibm-jdbcUpgrade java-1_6_0-ibm-pluginUpgrade java-1_6_0-ibm-develUpgrade java-1_7_0-ibm-pluginUpgrade java-1_7_0-ibm-alsaUpgrade java-1_7_0-ibmUpgrade java-1_6_0-ibmUpgrade java-1_6_0-ibm-fontsUpgrade java-1_7_0-ibm-jdbc | Dec 18, 2015 | May 26, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub