CVE漏洞中文网

0DayBank一个专门收集整理全球互联网漏洞的公开发布网站
  1. 首页
  2. CVE
  3. 正文

CVE-2017-10053 Multiple vulnerabilities in IBM Java SDK affect IBM Tivoli Monitoring

2018年1月2日 3383点热度 0人点赞 0条评论

漏洞类别:Local

漏洞等级:

漏洞信息

IBM Tivoli Monitoring automates monitoring of essential system resources to detect bottlenecks and potential problems.

There are several vulnerabilities in IBM SDK Java Technology Edition that is shipped as part of multiple IBM Tivoli Monitoring (ITM) component :
-An unspecified vulnerability in Oracle Java SE related to the Java SE Deployment component could allow an unauthenticated attacker to take control of the system.:
-A flaw in the IBM J9 VM class verifier allows untrusted code to disable the security manager and elevate its privileges.

AFFECTED PRODUCTS AND VERSIONS:
The following components of IBM Tivoli Monitoring (ITM) are affected by this bulletin:
-Java (CANDLEHOME) ITM 6.2.3 Fix Pack 1 (JRE 1.6) through 6.3.0 Fix Pack 7 (JRE 7)
-Java (Tivoli Enterprise Portal client browser or webstart) ITM 6.2.3 Fix pack 1 through 6.3.0 Fix Pack 7

QID Detection Logic(Authenticated)
It checks for vulnerable versions of IBM Tivoli Monitoring (ITM)

漏洞危害

Successful exploitation allows remote attackers to take control of the system.:

解决方案

Vendor has released a patch to fix this vulnerability. More information can be obtained from IBM Security Bulletin.

Patch:
Following are links for downloading patches to fix the vulnerabilities:

IBM Security Bulletin: Windows

0daybank

标签: 暂无
最后更新:2018年9月19日

小助手

这个人很懒,什么都没留下

点赞
< 上一篇
下一篇 >

文章评论

您需要 登录 之后才可以评论

COPYRIGHT © 2024 www.pdr.cn CVE漏洞中文网. ALL RIGHTS RESERVED.

鲁ICP备2022031030号

联系邮箱:wpbgssyubnmsxxxkkk@proton.me