IBM Java SDK CVE-2014-0878 Security Bypass Vulnerability

Bugtraq ID:	67601
Class:	Design Error
CVE:	CVE-2014-0878
Remote:	Yes
Local:	No
Published:	May 19 2014 12:00AM
Updated:	Nov 19 2014 12:57AM
Credit:	The vendor reported this issue.
Vulnerable:	SuSE SUSE Linux Enterprise Server 10 SP3 LTSS + Linux kernel 2.6.5 IBM Websphere Portal 6.1 IBM Websphere Application Server 7.0 3 IBM Websphere Application Server 7.0 21 IBM Websphere Application Server 7.0 .9 IBM Websphere Application Server 7.0 .8 IBM Websphere Application Server 7.0 .2 IBM Websphere Application Server 7.0 .13 IBM Websphere Application Server 7.0 .12 IBM Websphere Application Server 7.0 .11 IBM Websphere Application Server 6.1 41 IBM Websphere Application Server 6.1 .9 IBM Websphere Application Server 6.1 .8 IBM Websphere Application Server 6.1 .7 IBM Websphere Application Server 6.1 .6 IBM Websphere Application Server 6.1 .5 IBM Websphere Application Server 6.1 .4 IBM Websphere Application Server 6.1 .33 IBM Websphere Application Server 6.1 .32 IBM Websphere Application Server 6.1 .3 IBM Websphere Application Server 6.1 .25 IBM Websphere Application Server 6.1 .23 IBM Websphere Application Server 6.1 .22 IBM Websphere Application Server 6.1 .21 IBM Websphere Application Server 6.1 .20 IBM Websphere Application Server 6.1 .2 IBM Websphere Application Server 6.1 .19 IBM Websphere Application Server 6.1 .18 IBM Websphere Application Server 6.1 .17 IBM Websphere Application Server 6.1 .15 IBM Websphere Application Server 6.1 .14 IBM Websphere Application Server 6.1 .13 IBM Websphere Application Server 6.1 .12 IBM Websphere Application Server 6.1 .11 IBM Websphere Application Server 6.1 .10 IBM Websphere Application Server 6.1 .1 IBM Websphere Application Server 6.1 IBM Websphere Application Server 8.0.0.4 IBM Websphere Application Server 8.0.0.1 IBM Websphere Application Server 8.0.0.0 IBM Websphere Application Server 8.0 IBM Websphere Application Server 7.0.0.7 IBM Websphere Application Server 7.0.0.6 IBM Websphere Application Server 7.0.0.5 IBM Websphere Application Server 7.0.0.4 IBM Websphere Application Server 7.0.0.23 IBM Websphere Application Server 7.0.0.19 IBM Websphere Application Server 7.0.0.17 IBM Websphere Application Server 7.0.0.15 IBM Websphere Application Server 7.0.0.14 IBM Websphere Application Server 7.0.0.13 IBM Websphere Application Server 7.0.0.1 IBM Websphere Application Server 7.0.0.0 IBM Websphere Application Server 7.0 IBM Websphere Application Server 6.1.0.45 IBM Websphere Application Server 6.1.0.43 IBM Websphere Application Server 6.1.0.39 IBM Websphere Application Server 6.1.0.37 IBM Websphere Application Server 6.1.0.35 IBM Websphere Application Server 6.1.0.34 IBM Websphere Application Server 6.1.0.33 IBM Websphere Application Server 6.1.0.31 IBM Websphere Application Server 6.1.0.29 IBM Websphere Application Server 6.1.0.27 IBM Websphere Application Server 6.1 IBM Tivoli Storage Productivity Center 4.2.1.185 IBM Tivoli Storage Productivity Center 4.2.1 IBM Tivoli Monitoring 6.2.3 IBM Tivoli Monitoring 6.2.2 IBM Tivoli Key Lifecycle Manager 1.0 IBM Maximo Asset Management 7.5 IBM Cognos Express 9.5 IBM Cognos Express 10.1 IBM CICS Transaction Gateway 8.0 IBM CICS Transaction Gateway 7.2 IBM CICS Transaction Gateway 7.1 IBM CICS Transaction Gateway 7.0 IBM AIX 7.1 IBM AIX 6.1 IBM AIX 5.3
Not Vulnerable:

IBM Java SDK CVE-2014-0878 Security Bypass Vulnerability

IBM Java SDK is prone to a security-bypass vulnerability.

An attacker can exploit this issue to bypass security restriction and perform unauthorized actions in the context of the application.

IBM Java SDK CVE-2014-0878 Security Bypass Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

IBM Java SDK CVE-2014-0878 Security Bypass Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

IBM Java SDK CVE-2014-0878 Security Bypass Vulnerability

References:

• IBM Homepage (IBM)