Security Bulletin: Multiple Vulnerabilities in Rational Synergy

Security Bulletin


Summary

Vulnerabilities in the Java Runtime Environment (JRE) 6 SR10 and earlier component shipped with Rational Synergy may affect the security of the product.

Vulnerability Details

Subscribe to My Notifications to be notified of important product support alerts like this.
  • Follow this link for more information (requires login with your IBM ID)

CVE ID: CVE-2012-0551

Description: Unspecified vulnerability in the Java Runtime Environment (JRE) 6 update 32 and earlier, allows remote attackers to affect confidentiality and integrity via unknown vectors related to Web Container or Deployment.

CVSS Base Score : 4.3
CVSS Temporal Score : See http://xforce.iss.net/xforce/xfdb/75010 for the current score
CVSS Environmental Score*: Undefined
CVSS Vector: (AV:N/AC:M/Au:N/C:P/I:P/A:N)


CVE ID: CVE-2012-1717

Description: Unspecified vulnerability in the Java Runtime Environment (JRE) 6 update 32 and earlier, allows local users to affect confidentiality via unknown vectors related to printing on Solaris or Linux.

CVSS Base Score : 2.1
CVSS Temporal Score : See http://xforce.iss.net/xforce/xfdb/76251 for the current score
CVSS Environmental Score*: Undefined
CVSS Vector: (AV:L/AC:L/Au:N/C:P/I:N/A:N)


CVE ID: CVE-2012-1716

Description: Unspecified vulnerability in the Java Runtime Environment (JRE) 6 update 32 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Swing.

CVSS Base Score : 10.0
CVSS Temporal Score : See http://xforce.iss.net/xforce/xfdb/76244 for the current score
CVSS Environmental Score*: Undefined
CVSS Vector: (AV:N/AC:L/Au:N/C:C/I:C/A:C)


CVE ID: CVE-2012-1713

Description: Unspecified vulnerability in the Java Runtime Environment (JRE) 6 update 32 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.

CVSS Base Score: 10.0
CVSS Temporal Score: See http://xforce.iss.net/xforce/xfdb/76239 for the current score
CVSS Environmental Score*: Undefined
CVSS Vector: (AV:N/AC:L/Au:N/C:C/I:C/A:C)


CVE ID: CVE-2012-1718

Description: Unspecified vulnerability in the Java Runtime Environment (JRE) 6 update 32 and earlier, allows remote attackers to affect availability via unknown vectors related to Security.

CVSS Base Score: 5.0
CVSS Temporal Score: See http://xforce.iss.net/xforce/xfdb/76249 for the current score
CVSS Environmental Score*: Undefined
CVSS Vector: (AV:N/AC:L/Au:N/C:N/I:N/A:P)


CVE ID: CVE-2012-1719

Description: Unspecified vulnerability in the Java Runtime Environment (JRE) 6 update 32 and earlier, allows remote attackers to affect integrity, related to CORBA.

CVSS Base Score: 5.0
CVSS Temporal Score: See http://xforce.iss.net/xforce/xfdb/76247 for the current score
CVSS Environmental Score*: Undefined
CVSS Vector: (AV:N/AC:L/Au:N/C:N/I:P/A:N)


CVE ID: CVE-2012-1722

Description: Unspecified vulnerability in the Java Runtime Environment (JRE) 6 update 32 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2012-1721.

CVSS Base Score: 10.0
CVSS Temporal Score: See ( http://xforce.iss.net/xforce/xfdb/76241 for the current score
CVSS Environmental Score*: Undefined
CVSS Vector: (AV:N/AC:L/Au:N/C:C/I:C/A:C)


CVE ID: CVE-2012-1721

Description: Unspecified vulnerability in the Java Runtime Environment (JRE) 6 update 32 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2012-1722.

CVSS Base Score : 10.0
CVSS Temporal Score : See ( http://xforce.iss.net/xforce/xfdb/76240 for the current score
CVSS Environmental Score* : Undefined
CVSS Vector: (AV:N/AC:L/Au:N/C:C/I:C/A:C)


CVE ID: CVE-2012-1725

Description: Unspecified vulnerability in the Java Runtime Environment (JRE) 6 update 32 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.

CVSS Base Score: 10.0
CVSS Temporal Score: See ( http://xforce.iss.net/xforce/xfdb/76243 for the current score
CVSS Environmental Score*: Undefined
CVSS Vector: (AV:N/AC:L/Au:N/C:C/I:C/A:C)


CVE ID: CVE-2012-1531

Description: Unspecified vulnerability in the Java Runtime Environment (JRE) 6 update 35 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.

CVSS Base Score: 10.0
CVSS Temporal Score: See http://xforce.iss.net/xforce/xfdb/79294 for the current score
CVSS Environmental Score*: Undefined
CVSS Vector: (AV:N/AC:L/Au:N/C:C/I:C/A:C)


CVE ID: CVE-2012-1532

Description: Unspecified vulnerability in the Java Runtime Environment (JRE) 6 update 35 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.

CVSS Base Score : 10.0
CVSS Temporal Score : See http://xforce.iss.net/xforce/xfdb/26069 for the current score
CVSS Environmental Score* : Undefined
CVSS Vector: (AV:N/AC:L/Au:N/C:C/I:C/A:C)


CVE ID: CVE-2012-1533

Description: Unspecified vulnerability in the Java Runtime Environment (JRE) 6 update 35 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.

CVSS Base Score : 10.0
CVSS Temporal Score : See http://xforce.iss.net/xforce/xfdb/26069 for the current score
CVSS Environmental Score* : Undefined
CVSS Vector: (AV:N/AC:L/Au:N/C:C/I:C/A:C)


CVE ID: CVE-2012-3143

Description: Unspecified vulnerability in the Java Runtime Environment (JRE) 6 update 35 and earlier, allows remote attackers to affect confidentiality, integrity, and availability, related to JMX.

CVSS Base Score : 10.0
CVSS Temporal Score : Unknown
CVSS Environmental Score* : Undefined
CVSS Vector: (AV:N/AC:L/Au:N/C:C/I:C/A:C)


CVE ID: CVE-2012-3159

Description: Unspecified vulnerability in the Java Runtime Environment (JRE) 6 update 35 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.

CVSS Base Score: 7.5
CVSS Temporal Score : Unknown
CVSS Environmental Score* : Undefined
CVSS Vector: (AV:N/AC:L/Au:N/C:P/I:P/A:P)


CVE ID: CVE-2012-3216

Description: Unspecified vulnerability in the Java Runtime Environment (JRE) 6 update 35 and earlier, allows remote attackers to affect confidentiality via unknown vectors related to Libraries.

CVSS Base Score: 2.6
CVSS Temporal Score: Unknown
CVSS Environmental Score*: Undefined
CVSS Vector: (AV:N/AC:H/Au:N/C:P/I:N/A:N)


CVE ID: CVE-2012-4416

Description: Unspecified vulnerability in the Java Runtime Environment (JRE) 6 updates 35 and earlier, allows remote attackers to affect confidentiality and integrity via unknown vectors related to Hotspot.

CVSS Base Score: 6.4
CVSS Temporal Score: See http://xforce.iss.net/xforce/xfdb/78432 for the current score
CVSS Environmental Score*: Undefined
CVSS Vector: (AV:N/AC:L/Au:N/C:P/I:P/A:N)


CVE ID: CVE-2012-5068

Description: Unspecified vulnerability in the Java Runtime Environment (JRE) 6 update 35 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.

CVSS Base Score : 7.5
CVSS Temporal Score : See ( http://xforce.iss.net/xforce/xfdb/79293 for the current score
CVSS Environmental Score* : Undefined
CVSS Vector: (AV:N/AC:L/Au:N/C:P/I:P/A:P)


CVE ID: CVE-2012-5069

Description: Unspecified vulnerability in the Java Runtime Environment (JRE) 6 update 35 and earlier, allows remote attackers to affect confidentiality and integrity via unknown vectors related to Concurrency.

CVSS Base Score: 5.8
CVSS Temporal Score : Unknown
CVSS Environmental Score* : Undefined
CVSS Vector: (AV:N/AC:M/Au:N/C:P/I:P/A:N)


CVE ID: CVE-2012-5071

Description: Unspecified vulnerability in the Java Runtime Environment (JRE) 6 update 35 and earlier, allows remote attackers to affect confidentiality and integrity, related to JMX.

CVSS Base Score: 6.4
CVSS Temporal Score : Unknown
CVSS Environmental Score* : Undefined
CVSS Vector: (AV:N/AC:L/Au:N/C:P/I:P/A:N)


CVE ID: CVE-2012-5072

Description: Unspecified vulnerability in the Java Runtime Environment (JRE) 6 update 35 and earlier, allows remote attackers to affect confidentiality via unknown vectors related to Security.

CVSS Base Score: 5.0
CVSS Temporal Score : Unknown
CVSS Environmental Score* : Undefined
CVSS Vector : (AV:N/AC:L/Au:N/C:P/I:N/A:N)


CVE ID: CVE-2012-5073

Description: Unspecified vulnerability in the Java Runtime Environment (JRE) 6 update 35 and earlier, allows remote attackers to affect integrity via unknown vectors related to Libraries.

CVSS Base Score: 5.0
CVSS Temporal Score : Unknown
CVSS Environmental Score* : Undefined
CVSS Vector : (AV:N/AC:L/Au:N/C:P/I:N/A:N)


CVE ID: CVE-2012-5075

Description: Unspecified vulnerability in the Java Runtime Environment (JRE) 6 update 35 and earlier, allows remote attackers to affect confidentiality, related to JMX.

CVSS Base Score: 5.0
CVSS Temporal Score : Unknown
CVSS Environmental Score* : Undefined
CVSS Vector : (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Affected Products and Versions

All Rational Synergy supported platforms

Remediation/Fixes

Rational Synergy 7.1.0.x should upgrade to Rational Synergy version 7.1.0.7 (Rational Synergy 7.1.0.7) or later.

Workarounds and Mitigations

None

References

Related information

Acknowledgement

None

Change History

* 20 December 2012: Original copy published

*The CVSS Environment Score is customer environment specific and will ultimately impact the Overall CVSS Score. Customers can evaluate the impact of this vulnerability in their environments by accessing the links in the Reference section of this Security Bulletin.

Disclaimer

According to the Forum of Incident Response and Security Teams (FIRST), the Common Vulnerability Scoring System (CVSS) is an "industry open standard designed to convey vulnerability severity and help to determine urgency and priority of response." IBM PROVIDES THE CVSS SCORES "AS IS" WITHOUT WARRANTY OF ANY KIND, INCLUDING THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. CUSTOMERS ARE RESPONSIBLE FOR ASSESSING THE IMPACT OF ANY ACTUAL OR POTENTIAL SECURITY VULNERABILITY.

Rate this page:

(0 users)Average rating

Document information


More support for:

Rational Synergy
General Information

Software version:

7.1, 7.1.0.1, 7.1.0.2, 7.1.0.3, 7.1.0.4, 7.1.0.5, 7.1.0.6

Operating system(s):

AIX, Linux, Solaris, Windows

Reference #:

1618977

Modified date:

2013-12-09

Translate my page

Machine Translation

Content navigation