PT-2013-5555
CVE-2013-5458
·
Publicado
2013-11-07
·
Atualizado
2017-08-29
Descrição por
CVSS 2.0
9.3
AltaMétricasAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
IBM Java SDK version 7.0.0 before SR6
Description
The issue allows remote attackers to execute arbitrary code via unspecified vectors. It also enables code running under a security manager to escalate its privileges by modifying or removing the security manager.
Recommendations
For IBM Java SDK version 7.0.0 before SR6, update to a version that includes SR6 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive resources to minimize the risk of exploitation.
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾