CVE-2012-4820 · threatengine.sh

Home/CVE/Unspecified vulnerability in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 an

CVE

CVE-2012-4820

Unspecified vulnerability in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 an

Unspecified vulnerability in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 SR14 and earlier, and Java 142 SR13 FP13 and earlier.

as used in IBM Rational Host On-Demand, Rational Change, Tivoli Monitoring, Smart Analytics System 5600, Tivoli Remote Control 5.1.2, WebSphere Real Time, Lotus Notes & Domino, Tivoli Storage Productivity Center, and Service Deliver Manager.

and other products from other vendors such as Red Hat, when running under a security manager, allows remote attackers to gain privileges by modifying or removing the security manager via vectors related to "insecure use of the java.lang.reflect.Method invoke() method.".

HIGH · CVSS 9.3 EPSS 0.08461

Schedule remediation

EPSS percentile: top 8% of all CVEs by exploitation likelihood
CVSS base score ≥ 7.0

Sigma rules6 YARA rules0

▤

Affected Products & Versions

8

ibm java>= 1.4.2 and <= 1.4.2.13.13
ibm java>= 5.0.0.0 and <= 5.0.14.0
ibm java>= 6.0.0.0 and <= 6.0.11.0
ibm java>= 7.0.0.0 and <= 7.0.2.0
ibm lotus dominoall versions
ibm lotus notesall versions
ibm lotus notes sametimeall versions
ibm lotus notes travelerall versions

◈

Sigma Hunt Rules

6

Exact rules name this CVE ID. Product rules name an affected product in their title. Related rules cover techniques used by actors who exploited this CVE. Showing the most relevant matches; the complete related set is on the full drill-down.

producthighSuspicious Java Children Processes

producthighSuspicious Processes Spawned by Java.EXE

producthighSuspicious Shells Spawn by Java Utility Keytool

producthighJava Payload Strings

productmediumJava Running with Remote Debugging

productmediumShell Process Spawned by Java.EXE

See all related Sigma rules for this CVE

▣

Scoring & Timeline

9.3

HIGH · CVSS v2 (legacy) · psirt@us.ibm.com

View on NVD

This CVE predates CVSS v3; the legacy v2 score is shown so triage still has a severity to work with.

v2 Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Published to NVD11 Jan 2013 · 12:55 AM

⚑

Vendor Advisories

6

rhsaRHSA-2013:1456Moderate
rhsaRHSA-2013:1455Moderate
rhsaRHSA-2012:1485Critical
rhsaRHSA-2012:1465Critical
rhsaRHSA-2012:1467Critical
Show all 6 vendor advisoriesrhsaRHSA-2012:1466Critical

🔗

References & Sources

25

Source URLs (vendor pages, mailing lists, write-ups). Exploit/PoC links are in their own section above to avoid duplication.

http://rhn.redhat.com/errata/RHSA-2012-1465.htmlThird Party Advisory

http://rhn.redhat.com/errata/RHSA-2012-1466.htmlThird Party Advisory

http://rhn.redhat.com/errata/RHSA-2012-1467.htmlThird Party Advisory

http://rhn.redhat.com/errata/RHSA-2013-1455.htmlThird Party Advisory

http://rhn.redhat.com/errata/RHSA-2013-1456.htmlThird Party Advisory

http://seclists.org/bugtraq/2012/Sep/38Mailing ListThird Party Advisory

Show all 25 references

http://secunia.com/advisories/51326Third Party Advisory

http://secunia.com/advisories/51327Third Party Advisory

http://secunia.com/advisories/51328Third Party Advisory

http://secunia.com/advisories/51393Third Party Advisory

http://secunia.com/advisories/51634Third Party Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg1IV29654Vendor Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg21615705Vendor Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg21615800Vendor Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg21616490Vendor Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg21616594Vendor Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg21616616Vendor Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg21616617Vendor Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg21616652Vendor Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg21616708Vendor Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg21621154Vendor Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg21631786Vendor Advisory

http://www.securityfocus.com/bid/55495Third Party AdvisoryVDB Entry

https://exchange.xforce.ibmcloud.com/vulnerabilities/78764Third Party AdvisoryVDB Entry

https://www-304.ibm.com/support/docview.wss?uid=swg21616546Vendor Advisory

Intelligence Graph · click any node to traverse

CVETechnique ActorTool Family

drag to reposition · click any node to traverse · button top-right enlarges

External lookups - second-class, for what we don’t hold ourselves

NVD CVE.org CISA Vulners Exploit-DB GitHub PoC VulnCheck KEV GreyNoise

Vulnerabilities
CISA KEV catalog
CWE weaknesses
CAPEC attack patterns
Package vulnerabilities

Threat intelligence
Threat actors
Tools & malware
ATT&CK techniques
IOCs

Detection & defense
Sigma rules
YARA rules
Atomic Red Team tests
D3FEND countermeasures

Compliance
NIST 800-53
ISO 27001:2022
SOC 2 TSC
PCI-DSS v4.0
CIS Controls v8.1

About
All capabilities
Live statistics
Data sources
Privacy policy
Terms of service

threatengine.sh · Open-source threat intelligence platform · 100+ authoritative sources · Every fact traces to its origin