CVE-2013-5457: Critical severity ibm jdk vulnerability
An unspecified Java sandbox bypass issue in the ORB component was fixed in IBM JDK 7 SR6 and 6 SR15. This issue got the following CVSSv2 score upstream: 9.3/AV:N/AC:M/Au:N/C:C/I:C/A:C
https://www.ibm.com/developerworks/java/jdk/alerts/#IBMSecurityUpdateNovember2013 https://www.ibm.com/developerworks/java/jdk/aix/j732/Java7.fixes.html#SR6 https://www.ibm.com/developerworks/java/jdk/aix/j632/Java6.fixes.html#SR15
Further info is available in this WebSphere Real Time security bulletin:
http://www-01.ibm.com/support/docview.wss?uid=swg21655202&myns=swgws&mynp=OCSSSTCZ&mync=R
CVE-2013-5456, CVE-2013-5457 and CVE-2013-5458 allow code running under a security manager to escalate its privileges by modifying or removing the security manager.
Additional details may become available under this X-Force database article:
http://xforce.iss.net/xforce/xfdb/88256
Other sources
Unspecified vulnerability in IBM Java SDK 7.0.0 before SR6, 6.0.1 before SR7, and 6.0.0 before SR15 allows remote attackers to execute arbitrary code via unspecified vectors.
Affected Software
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is the severity of CVE-2013-5457?
CVE-2013-5457 has a CVSSv2 score of 9.3, indicating critical severity.
Which versions of IBM JDK are affected by CVE-2013-5457?
Affected versions include IBM JDK 6.0.0.0, 6.0.1.0, and 7.0.0.0.
How do I fix CVE-2013-5457?
To fix CVE-2013-5457, update to the latest fixes provided, specifically IBM JDK 6 SR15 or 7 SR6.
Is there a workaround for CVE-2013-5457?
No specific workarounds are recommended for CVE-2013-5457; upgrading is the best solution.
What is the nature of the vulnerability in CVE-2013-5457?
CVE-2013-5457 is a Java sandbox bypass issue that could allow unauthorized access to sensitive data.