CVE-2016-0363
published 2016-06-03CVE-2016-0363: The com.ibm.CORBA.iiop.ClientDelegate class in IBM SDK, Java Technology Edition 6 before SR16 FP25 (6.0.16.25), 6 R1 before SR8 FP25 (6.1.8.25), 7 before SR9…
PriorityP347high8.1CVSS 3.0
AVNACHPRNUINSUCHIHAH
EPSS
3.98%
89.4th percentile
The com.ibm.CORBA.iiop.ClientDelegate class in IBM SDK, Java Technology Edition 6 before SR16 FP25 (6.0.16.25), 6 R1 before SR8 FP25 (6.1.8.25), 7 before SR9 FP40 (7.0.9.40), 7 R1 before SR3 FP40 (7.1.3.40), and 8 before SR3 (8.0.3.0) uses the invoke method of the java.lang.reflect.Method class in an AccessController doPrivileged block, which allows remote attackers to call setSecurityManager and bypass a sandbox protection mechanism via vectors related to a Proxy object instance implementing the java.lang.reflect.InvocationHandler interface. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-3009.
Affected
28 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| ibm | java_sdk | >= 6.0.0.0 < 6.0.16.25 | 6.0.16.25 |
| ibm | java_sdk | >= 6.1.0.0 < 6.1.8.25 | 6.1.8.25 |
| ibm | java_sdk | >= 7.0.0.0 < 7.0.9.40 | 7.0.9.40 |
| ibm | java_sdk | >= 7.1.0.0 < 7.1.3.40 | 7.1.3.40 |
| ibm | java_sdk | >= 8.0.0.0 < 8.0.3.0 | 8.0.3.0 |
| novell | suse_linux_enterprise_module_for_legacy_software | — | — |
| novell | suse_linux_enterprise_server | — | — |
| novell | suse_linux_enterprise_server | — | — |
| novell | suse_linux_enterprise_software_development_kit | — | — |
| novell | suse_linux_enterprise_software_development_kit | — | — |
| novell | suse_manager | — | — |
| novell | suse_manager_proxy | — | — |
| novell | suse_openstack_cloud | — | — |
| redhat | enterprise_linux_desktop | — | — |
| redhat | enterprise_linux_desktop | — | — |
| redhat | enterprise_linux_hpc_node_supplementary | — | — |
| redhat | enterprise_linux_hpc_node_supplementary | — | — |
| redhat | enterprise_linux_server | — | — |
| redhat | enterprise_linux_server | — | — |
| redhat | enterprise_linux_server_eus | — | — |
| redhat | enterprise_linux_server_eus | — | — |
| redhat | enterprise_linux_server_eus | — | — |
| redhat | enterprise_linux_server_eus | — | — |
| redhat | enterprise_linux_server_eus | — | — |
| redhat | enterprise_linux_workstation | — | — |
CVSS provenance
nvdv3.08.1HIGHCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv2.06.8MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
vendor_redhat9.3CRITICAL
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
JDK: insecure use of invoke method in CORBA component, incorrect CVE-2013-3009 fix
vendor_redhat·2016-04-04·CVSS 9.3
CVE-2016-0363 [CRITICAL] JDK: insecure use of invoke method in CORBA component, incorrect CVE-2013-3009 fix
JDK: insecure use of invoke method in CORBA component, incorrect CVE-2013-3009 fix
The com.ibm.CORBA.iiop.ClientDelegate class in IBM SDK, Java Technology Edition 6 before SR16 FP25 (6.0.16.25), 6 R1 before SR8 FP25 (6.1.8.25), 7 before SR9 FP40 (7.0.9.40), 7 R1 before SR3 FP40 (7.1.3.40), and 8 before SR3 (8.0.3.0) uses the invoke method of the java.lang.reflect.Method class in an AccessController doPrivileged block, which allows remote attackers to call setSecurityManager and bypass a sandbox protection mechanism via vectors related to a Proxy object instance implementing the java.lang.reflect.InvocationHandler interface. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-3009.
GHSA
GHSA-p824-48mj-5qcc: The com
ghsa_unreviewed·2022-05-14·CVSS 9.3
CVE-2016-0363 [CRITICAL] CWE-20 GHSA-p824-48mj-5qcc: The com
The com.ibm.CORBA.iiop.ClientDelegate class in IBM SDK, Java Technology Edition 6 before SR16 FP25 (6.0.16.25), 6 R1 before SR8 FP25 (6.1.8.25), 7 before SR9 FP40 (7.0.9.40), 7 R1 before SR3 FP40 (7.1.3.40), and 8 before SR3 (8.0.3.0) uses the invoke method of the java.lang.reflect.Method class in an AccessController doPrivileged block, which allows remote attackers to call setSecurityManager and bypass a sandbox protection mechanism via vectors related to a Proxy object instance implementing the java.lang.reflect.InvocationHandler interface. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-3009.
No detection rules found.
No public exploits indexed.
http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00039.htmlhttp://lists.opensuse.org/opensuse-security-announce/2016-05/msg00040.htmlhttp://lists.opensuse.org/opensuse-security-announce/2016-05/msg00042.htmlhttp://lists.opensuse.org/opensuse-security-announce/2016-05/msg00058.htmlhttp://lists.opensuse.org/opensuse-security-announce/2016-05/msg00059.htmlhttp://lists.opensuse.org/opensuse-security-announce/2016-05/msg00061.htmlhttp://lists.opensuse.org/opensuse-security-announce/2016-05/msg00067.htmlhttp://lists.opensuse.org/opensuse-security-announce/2016-06/msg00002.htmlhttp://rhn.redhat.com/errata/RHSA-2016-0701.htmlhttp://rhn.redhat.com/errata/RHSA-2016-0702.htmlhttp://rhn.redhat.com/errata/RHSA-2016-0708.htmlhttp://rhn.redhat.com/errata/RHSA-2016-0716.htmlhttp://rhn.redhat.com/errata/RHSA-2016-1039.htmlhttp://seclists.org/fulldisclosure/2016/Apr/20http://seclists.org/fulldisclosure/2016/Apr/3http://www-01.ibm.com/support/docview.wss?uid=swg1IX90172http://www-01.ibm.com/support/docview.wss?uid=swg21980826http://www.security-explorations.com/materials/SE-2012-01-IBM-4.pdfhttp://www.securityfocus.com/bid/85895http://www.securitytracker.com/id/1035953https://access.redhat.com/errata/RHSA-2016:1430https://access.redhat.com/errata/RHSA-2017:1216http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00039.htmlhttp://lists.opensuse.org/opensuse-security-announce/2016-05/msg00040.htmlhttp://lists.opensuse.org/opensuse-security-announce/2016-05/msg00042.htmlhttp://lists.opensuse.org/opensuse-security-announce/2016-05/msg00058.htmlhttp://lists.opensuse.org/opensuse-security-announce/2016-05/msg00059.htmlhttp://lists.opensuse.org/opensuse-security-announce/2016-05/msg00061.htmlhttp://lists.opensuse.org/opensuse-security-announce/2016-05/msg00067.htmlhttp://lists.opensuse.org/opensuse-security-announce/2016-06/msg00002.htmlhttp://rhn.redhat.com/errata/RHSA-2016-0701.htmlhttp://rhn.redhat.com/errata/RHSA-2016-0702.htmlhttp://rhn.redhat.com/errata/RHSA-2016-0708.htmlhttp://rhn.redhat.com/errata/RHSA-2016-0716.htmlhttp://rhn.redhat.com/errata/RHSA-2016-1039.htmlhttp://seclists.org/fulldisclosure/2016/Apr/20http://seclists.org/fulldisclosure/2016/Apr/3http://www-01.ibm.com/support/docview.wss?uid=swg1IX90172http://www-01.ibm.com/support/docview.wss?uid=swg21980826http://www.security-explorations.com/materials/SE-2012-01-IBM-4.pdfhttp://www.securityfocus.com/bid/85895http://www.securitytracker.com/id/1035953https://access.redhat.com/errata/RHSA-2016:1430https://access.redhat.com/errata/RHSA-2017:1216
2016-06-03
Published