NVD

Id
46097  
Name
CVE-2012-4820  
Description
Unspecified vulnerability in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 SR14 and earlier, and Java 142 SR13 FP13 and earlier; as used in IBM Rational Host On-Demand, Rational Change, Tivoli Monitoring, Smart Analytics System 5600, Tivoli Remote Control 5.1.2, WebSphere Real Time, Lotus Notes & Domino, Tivoli Storage Productivity Center, and Service Deliver Manager; and other products from other vendors such as Red Hat, when running under a security manager, allows remote attackers to gain privileges by modifying or removing the security manager via vectors related to "insecure use of the java.lang.reflect.Method invoke() method."  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2013-01-10  
Modified Date
2013-10-30  
Seq
2012-4820  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
231301 46097 CVE-2012-4820 RHSA-2012:1465  View
231302 46097 CVE-2012-4820 RHSA-2012:1466  View
231303 46097 CVE-2012-4820 RHSA-2012:1467  View
231304 46097 CVE-2012-4820 RHSA-2013:1455  View
231305 46097 CVE-2012-4820 RHSA-2013:1456  View
231306 46097 CVE-2012-4820 20120911 [SE-2012-01] Security vulnerabilities in IBM Java  View
231307 46097 CVE-2012-4820 IV29654  View
231308 46097 CVE-2012-4820 http://www-01.ibm.com/support/docview.wss?uid=swg21615705  View
231309 46097 CVE-2012-4820 http://www-01.ibm.com/support/docview.wss?uid=swg21615800  View
231310 46097 CVE-2012-4820 http://www-01.ibm.com/support/docview.wss?uid=swg21616490  View
231311 46097 CVE-2012-4820 http://www-01.ibm.com/support/docview.wss?uid=swg21616594  View
231312 46097 CVE-2012-4820 http://www-01.ibm.com/support/docview.wss?uid=swg21616616  View
231313 46097 CVE-2012-4820 http://www-01.ibm.com/support/docview.wss?uid=swg21616617  View
231314 46097 CVE-2012-4820 http://www-01.ibm.com/support/docview.wss?uid=swg21616652  View
231315 46097 CVE-2012-4820 http://www-01.ibm.com/support/docview.wss?uid=swg21616708  View
231316 46097 CVE-2012-4820 http://www-01.ibm.com/support/docview.wss?uid=swg21621154  View
231317 46097 CVE-2012-4820 http://www-01.ibm.com/support/docview.wss?uid=swg21631786  View
231318 46097 CVE-2012-4820 55495  View
231319 46097 CVE-2012-4820 ibm-java-invoke-code-execution(78764)  View
231320 46097 CVE-2012-4820 https://www-304.ibm.com/support/docview.wss?uid=swg21616546  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
30196 JVNDB-2012-005903 IBM Java の JRE コンポーネントにおける権限を取得される脆弱性 複数の IBM 製品、およびその他のベンダ製品で使用される IBM Java の JRE コンポーネントには、Security Manager の下で実行される場合、java.lang.reflect.Method invoke() メソッドの安全でない使用に関連して、権限を取得される脆弱性が存在します。 CVE-2012-4820 58058 CVE-2012-4820 46097 9.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-005903.html 2012-10-05 2015-08-11 View