CVE Kennung:	CVE-2012-4820
Beschreibung:	Unspecified vulnerability in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 SR14 and earlier, and Java 142 SR13 FP13 and earlier; as used in IBM Rational Host On-Demand, Rational Change, Tivoli Monitoring, Smart Analytics System 5600, Tivoli Remote Control 5.1.2, WebSphere Real Time, Lotus Notes & Domino, Tivoli Storage Productivity Center, and Service Deliver Manager; and other products from other vendors such as Red Hat, when running under a security manager, allows remote attackers to gain privileges by modifying or removing the security manager via vectors related to "insecure use of the java.lang.reflect.Method invoke() method."
Test Kennungen:	Nicht verfügbar
Querverweise:	Common Vulnerability Exposure (CVE) ID: CVE-2012-4820 AIX APAR: IV29654 http://www-01.ibm.com/support/docview.wss?uid=swg1IV29654 BugTraq ID: 55495 http://www.securityfocus.com/bid/55495 Bugtraq: 20120911 [SE-2012-01] Security vulnerabilities in IBM Java (Google Search) http://seclists.org/bugtraq/2012/Sep/38 RedHat Security Advisories: RHSA-2012:1465 http://rhn.redhat.com/errata/RHSA-2012-1465.html RedHat Security Advisories: RHSA-2012:1466 http://rhn.redhat.com/errata/RHSA-2012-1466.html RedHat Security Advisories: RHSA-2012:1467 http://rhn.redhat.com/errata/RHSA-2012-1467.html RedHat Security Advisories: RHSA-2013:1455 http://rhn.redhat.com/errata/RHSA-2013-1455.html RedHat Security Advisories: RHSA-2013:1456 http://rhn.redhat.com/errata/RHSA-2013-1456.html http://secunia.com/advisories/51326 http://secunia.com/advisories/51327 http://secunia.com/advisories/51328 http://secunia.com/advisories/51393 http://secunia.com/advisories/51634 XForce ISS Database: ibm-java-invoke-code-execution(78764) https://exchange.xforce.ibmcloud.com/vulnerabilities/78764