REDHAT-BUG-1302689: Medium severity ibm jdk 8 vulnerability
The following flaw was reported for IBM JDK:
A flaw in the IBM J9 JVM allows code to invoke non-public interface methods under certain circumstances. Untrusted code could potentially exploit this. This could lead to sensitive data being exposed to an attacker, or the attacker being able to inject bad data.
http://www-01.ibm.com/support/docview.wss?uid=swg21974193 http://www.ibm.com/developerworks/java/jdk/alerts/#IBMSecurityUpdateJanuary2016
This flaw could allow an untrusted Java application or applet to bypass certain Java sandbox restrictions.
Issue was fixed in IBM JDK 6 SR16-FP20, 7 SR9-FP30, 7R1 SR3-FP30, and 8 SR2-FP10.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-1302689?
The vulnerability REDHAT-BUG-1302689 is classified as a high severity flaw that could lead to sensitive data exposure.
How do I fix REDHAT-BUG-1302689?
To fix REDHAT-BUG-1302689, upgrade your IBM JDK to the latest version that is not affected by this vulnerability.
What software is affected by REDHAT-BUG-1302689?
REDHAT-BUG-1302689 affects specific versions of IBM JDK including versions up to 6 SR16-FP20, 7 SR9-FP30, and 8 SR2-FP10.
Who is impacted by REDHAT-BUG-1302689?
Developers and organizations using the affected versions of IBM JDK are at risk from the vulnerability REDHAT-BUG-1302689.
Can REDHAT-BUG-1302689 be exploited remotely?
Yes, the vulnerability REDHAT-BUG-1302689 allows untrusted code to potentially exploit the flaw, which could lead to remote code execution.