CVE-2013-5375
First published: Sun Nov 24 2013(Updated: )
Unspecified vulnerability in IBM Java SDK 7.0.0 before SR6, 6.0.1 before SR7, 6.0.0 before SR15, and 5.0.0 before SR16 FP4 allows remote attackers to access restricted classes via unspecified vectors related to XML and XSL.
Credit: psirt@us.ibm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM JDK | =5.0.0.0 | |
| IBM JDK | =6.0.0.0 | |
| IBM JDK | =6.0.1.0 | |
| IBM JDK | =7.0.0.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00013.html
- http://rhn.redhat.com/errata/RHSA-2013-1507.html
- http://rhn.redhat.com/errata/RHSA-2013-1508.html
- http://rhn.redhat.com/errata/RHSA-2013-1509.html
- http://rhn.redhat.com/errata/RHSA-2013-1793.html
- http://secunia.com/advisories/56338
- http://www-01.ibm.com/support/docview.wss?uid=swg1IV51089
- http://www-01.ibm.com/support/docview.wss?uid=swg1IV51090
- http://www-01.ibm.com/support/docview.wss?uid=swg21655201
- http://www-01.ibm.com/support/docview.wss?uid=swg21655202
- https://exchange.xforce.ibmcloud.com/vulnerabilities/86901
- https://www.ibm.com/developerworks/java/jdk/alerts/#IBM_Security_Update_November_2013
Frequently Asked Questions
What is the severity of CVE-2013-5375?
CVE-2013-5375 is considered a high-severity vulnerability due to potential unauthorized access to restricted classes.
How do I fix CVE-2013-5375?
To fix CVE-2013-5375, upgrade your IBM Java SDK to a version that is not affected, such as 7.0.0 SR6 or newer.
Which IBM Java SDK versions are affected by CVE-2013-5375?
CVE-2013-5375 affects IBM Java SDK 5.0.0 before SR16 FP4, 6.0.0 before SR15, 6.0.1 before SR7, and 7.0.0 before SR6.
What are the possible consequences of CVE-2013-5375?
Exploitation of CVE-2013-5375 could allow remote attackers to access classes that are intended to be restricted, potentially compromising application security.
Is there any workaround for CVE-2013-5375?
There are no documented workarounds for CVE-2013-5375, so updating to a patched version is recommended.
- agent/references
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/author
- agent/severity
- agent/description
- agent/first-publish-date
- agent/event
- collector/nvd-index
- agent/software-canonical-lookup-request
- agent/tags
- agent/softwarecombine
- agent/source
- vendor/ibm
- canonical/ibm jdk
- version/ibm jdk/5.0.0.0
- version/ibm jdk/6.0.0.0
- version/ibm jdk/6.0.1.0
- version/ibm jdk/7.0.0.0