Security Bulletin
Summary
There is vulnerability in IBM® SDK Java™ Technology Edition, Java™ Version 6 and Java™ Version 7 that is used by Content Collector for IBM Connections.This issue was disclosed as part of the IBM Java SDK updates in January 2016
Vulnerability Details
CVEID: CVE-2016-0264
DESCRIPTION: A buffer overflow vulnerability in the IBM JVM facilitates arbitrary code execution under certain limited circumstances.
CVSS Base Score: 5.6
CVSS Temporal Score: See https://exchange.xforce.ibmcloud.com/vulnerabilities/110867 for the current score
CVSS Environmental Score*: Undefined
CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L)
Affected Products and Versions
Content Collector for IBM Connections v3.0
Content Collector for IBM Connections v4.0
Content Collector for IBM Connections v4.0.1
Remediation/Fixes
Product | VRM | Remediation |
Content Collector for IBM Connections | 3.0 | Use Content Collector for Content Collector for IBM Connections 4.0.0.3 Interim Fix 005 available at https://www.ibm.com/support/fixcentral/ |
Content Collector for IBM Connections | 4.0 | Use Content Collector for Content Collector for IBM Connections 4.0.0.3 Interim Fix 005 available at https://www.ibm.com/support/fixcentral/ |
Content Collector for IBM Connections | 4.0.1, 4.0.1.1, 4.0.1.2, 4.0.1.3 | Use Content Collector for Content Collector for IBM Connections 4.0.1.3 Interim Fix 001 available at https://www.ibm.com/support/fixcentral/ |
Content Collector for IBM Connections | 4.0.1.4 | Use Content Collector for Content Collector for IBM Connections 4.0.1.4 Interim Fix 001 available at https://www.ibm.com/support/fixcentral/ |
Workarounds and Mitigations
NA
Get Notified about Future Security Bulletins
References
Change History
December 12, 2016 Original Version Published
January 31, 2017 Second Version Published
*The CVSS Environment Score is customer environment specific and will ultimately impact the Overall CVSS Score. Customers can evaluate the impact of this vulnerability in their environments by accessing the links in the Reference section of this Security Bulletin.
Disclaimer
Review the IBM security bulletin disclaimer and definitions regarding your responsibilities for assessing potential impact of security vulnerabilities to your environment.
Was this topic helpful?
Document Information
Modified date:
30 August 2019
UID
swg21988365