Name: CVE-2018-1656: Improper Limitation of a Pathname to a Restricted Directory
Creator: Rapid7
Published: 2018-08-20T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2018-1656, CWE-22, CVSS 7.4, EPSS 0.04513

The IBM Java Runtime Environment's Diagnostic Tooling Framework for Java (DTFJ) (IBM SDK, Java Technology Edition 6.0 , 7.0, and 8.0) does not protect against path traversal attacks when extracting compressed dump files. IBM X-Force ID: 144882.

CVSS Details

CVSS 3.1 Base Score: 7.4
CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Centos_linux	—	Upgrade java-1.8.0-ibm-develUpgrade satellite-brandingUpgrade java-1.8.0-ibm-jdbcUpgrade java-1.8.0-ibm-demoUpgrade java-1.7.1-ibm-srcUpgrade java-1.7.1-ibm-develUpgrade satelliteUpgrade java-1.8.0-ibmUpgrade java-1.7.1-ibm-pluginUpgrade java-1.8.0-ibm-pluginUpgrade java-1.7.1-ibm-demoUpgrade java-1.7.1-ibmUpgrade java-1.7.1-ibm-jdbcUpgrade java-1.8.0-ibm-src	Aug 28, 2019	Aug 20, 2018
Ibm Aix	—	Apply the fix or workaround for java_july2018_advisory	Oct 2, 2018	Aug 20, 2018
Ibm Java	—	Upgrade IBM Java to version 7.1.4.30Upgrade IBM Java to version 7.0.10.30Upgrade IBM Java to version 8.0.5.20Upgrade IBM Java to version 6.0.16.70Upgrade IBM Java to version 6.1.8.70	Oct 5, 2018	Aug 20, 2018
Ibm Was	—	Upgrade to minimal fix pack levels as required by interim fixes and then apply latest Interim Fix.	Aug 20, 2018	Aug 20, 2018
Redhat_linux	—	Upgrade java-1.7.1-ibm-develUpgrade satellite-brandingUpgrade java-1.7.1-ibm-demoUpgrade java-1.7.1-ibm-jdbcUpgrade java-1.7.1-ibm-srcUpgrade java-1.8.0-ibm-pluginUpgrade satelliteUpgrade java-1.8.0-ibm-srcUpgrade java-1.8.0-ibm-develUpgrade java-1.8.0-ibm-demoUpgrade java-1.7.1-ibmUpgrade java-1.8.0-ibmUpgrade java-1.7.1-ibm-pluginUpgrade java-1.8.0-ibm-jdbc	Aug 28, 2018	Aug 20, 2018
Suse	—	Upgrade java-1_7_1-ibm-alsaUpgrade java-1_8_0-ibm-pluginUpgrade java-1_7_0-ibmUpgrade java-1_7_1-ibmUpgrade java-1_7_1-ibm-jdbcUpgrade java-1_8_0-ibm-develUpgrade java-1_7_1-ibm-develUpgrade java-1_7_1-ibm-pluginUpgrade java-1_7_0-ibm-alsaUpgrade java-1_7_0-ibm-develUpgrade java-1_7_0-ibm-pluginUpgrade java-1_7_0-ibm-jdbcUpgrade java-1_8_0-ibm-alsaUpgrade java-1_8_0-ibm	Sep 1, 2018	Aug 20, 2018
Ubuntu	—	Upgrade ibm-java80	Nov 19, 2024	Aug 20, 2018

Prioritise with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritise with Active Threat Intelligence