CVE-2018-1656
published 2018-08-20CVE-2018-1656: The IBM Java Runtime Environment's Diagnostic Tooling Framework for Java (DTFJ) (IBM SDK, Java Technology Edition 6.0 , 7.0, and 8.0) does not protect against…
PriorityP422medium6.5CVSS 3.0
AVNACLPRNUIRSUCNIHAN
The IBM Java Runtime Environment's Diagnostic Tooling Framework for Java (DTFJ) (IBM SDK, Java Technology Edition 6.0 , 7.0, and 8.0) does not protect against path traversal attacks when extracting compressed dump files. IBM X-Force ID: 144882.
Affected
14 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| ibm | sdk | — | — |
| ibm | sdk | — | — |
| ibm | sdk | — | — |
| oracle | enterprise_manager_base_platform | — | — |
| oracle | enterprise_manager_base_platform | — | — |
| redhat | enterprise_linux_desktop | — | — |
| redhat | enterprise_linux_desktop | — | — |
| redhat | enterprise_linux_server | — | — |
| redhat | enterprise_linux_server | — | — |
| redhat | enterprise_linux_workstation | — | — |
| redhat | enterprise_linux_workstation | — | — |
| redhat | satellite | — | — |
| redhat | satellite | — | — |
| redhat | satellite | — | — |
CVSS provenance
nvdv3.06.5MEDIUMCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
vendor_redhat7.4HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
JDK: path traversal flaw in the Diagnostic Tooling Framework
vendor_redhat·2018-08-16·CVSS 7.4
CVE-2018-1656 [HIGH] CWE-22 JDK: path traversal flaw in the Diagnostic Tooling Framework
JDK: path traversal flaw in the Diagnostic Tooling Framework
The IBM Java Runtime Environment's Diagnostic Tooling Framework for Java (DTFJ) (IBM SDK, Java Technology Edition 6.0 , 7.0, and 8.0) does not protect against path traversal attacks when extracting compressed dump files. IBM X-Force ID: 144882.
GHSA
GHSA-x34g-2xv6-mxf5: The IBM Java Runtime Environment's Diagnostic Tooling Framework for Java (DTFJ) (IBM SDK, Java Technology Edition 6
ghsa_unreviewed·2022-05-13
CVE-2018-1656 [MEDIUM] CWE-22 GHSA-x34g-2xv6-mxf5: The IBM Java Runtime Environment's Diagnostic Tooling Framework for Java (DTFJ) (IBM SDK, Java Technology Edition 6
The IBM Java Runtime Environment's Diagnostic Tooling Framework for Java (DTFJ) (IBM SDK, Java Technology Edition 6.0 , 7.0, and 8.0) does not protect against path traversal attacks when extracting compressed dump files. IBM X-Force ID: 144882.
No detection rules found.
No public exploits indexed.
http://www.ibm.com/support/docview.wss?uid=ibm10719653http://www.securityfocus.com/bid/105118http://www.securitytracker.com/id/1041765https://access.redhat.com/errata/RHSA-2018:2568https://access.redhat.com/errata/RHSA-2018:2569https://access.redhat.com/errata/RHSA-2018:2575https://access.redhat.com/errata/RHSA-2018:2576https://access.redhat.com/errata/RHSA-2018:2712https://access.redhat.com/errata/RHSA-2018:2713https://exchange.xforce.ibmcloud.com/vulnerabilities/144882https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.htmlhttp://www.ibm.com/support/docview.wss?uid=ibm10719653http://www.securityfocus.com/bid/105118http://www.securitytracker.com/id/1041765https://access.redhat.com/errata/RHSA-2018:2568https://access.redhat.com/errata/RHSA-2018:2569https://access.redhat.com/errata/RHSA-2018:2575https://access.redhat.com/errata/RHSA-2018:2576https://access.redhat.com/errata/RHSA-2018:2712https://access.redhat.com/errata/RHSA-2018:2713https://exchange.xforce.ibmcloud.com/vulnerabilities/144882https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html
2018-08-20
Published