An unspecified Java sandbox bypass issue in the ORB component was fixed in IBM JDK 7 SR6 and 6 SR15. This issue got the following CVSSv2 score upstream: 9.3/AV:N/AC:M/Au:N/C:C/I:C/A:C
https://www.ibm.com/developerworks/java/jdk/alerts/#IBMSecurityUpdateNovember2013 https://www.ibm.com/developerworks/java/jdk/aix/j732/Java7.fixes.html#SR6 https://www.ibm.com/developerworks/java/jdk/aix/j632/Java6.fixes.html#SR15
Further info is available in this WebSphere Real Time security bulletin:
http://www-01.ibm.com/support/docview.wss?uid=swg21655202&myns=swgws&mynp=OCSSSTCZ&mync=R
CVE-2013-5456, CVE-2013-5457 and CVE-2013-5458 allow code running under a security manager to escalate its privileges by modifying or removing the security manager.
Additional details may become available under this X-Force database article:
http://xforce.iss.net/xforce/xfdb/88256
Unspecified vulnerability in IBM Java SDK 7.0.0 before SR6, 6.0.1 before SR7, 6.0.0 before SR15, and 5.0.0 before SR16 FP4 allows remote attackers to access restricted classes via unspecified vectors related to XML and XSL.
Unspecified vulnerability in IBM Java SDK 5.0.0 before SR16 FP4, 7.0.0 before SR6, 6.0.1 before SR7, and 6.0.0 before SR15 allows remote attackers to access restricted classes via unspecified vectors.
A vulnerability was found in the Java Certificate Management System (CMS) keystore provider that could potentially allow an attacker to recover the private key from CMS keystores via a brute-force attack.
External References:
http://www.ibm.com/developerworks/java/jdk/alerts/#IBMSecurityUpdateJuly2014 http://www-01.ibm.com/support/docview.wss?uid=swg21680334 http://xforce.iss.net/xforce/xfdb/93756
IBM JDK updates 5.0 SR16-FP8, 6 SR16-FP2, 6R1 SR8-FP2, 7 SR8, and 7R1 SR2 fix a security issue described in the IBM security bulletin as:
IBM Java SDK contains a vulnerability in which the default configuration for the shared classes feature potentially allows arbitrary code to be injected into the shared classes cache, which may subsequently be executed by other local users.
This issue may possibly allow local users to run arbitrary code with the privileges of other users that use IBM JDK.
References: http://www-01.ibm.com/support/docview.wss?uid=swg21688283 http://xforce.iss.net/xforce/xfdb/93629 http://www.ibm.com/developerworks/java/jdk/alerts/#IBMSecurityUpdateNovember2014
Additional references that describe the shared class cache feature: http://www.ibm.com/developerworks/library/j-ibmjava4/ http://www.ibm.com/developerworks/library/j-sharedclasses/ http://www-01.ibm.com/support/knowledgecenter/SSYKE27.0.0/com.ibm.java.lnx.71.doc/diag/understanding/sharedclasses.html http://www-01.ibm.com/support/knowledgecenter/SSYKE27.0.0/com.ibm.java.lnx.71.doc/diag/appendixes/cmdline/Xshareclasses.html