Total vulnerabilities in the database
The IBM Java Runtime Environment's Diagnostic Tooling Framework for Java (DTFJ) (IBM SDK, Java Technology Edition 6.0 , 7.0, and 8.0) does not protect against path traversal attacks when extracting compressed dump files. IBM X-Force ID: 144882.
| Software | From | Fixed in |
|---|---|---|
| ibm / sdk | 6.0 | 6.0.x |
| ibm / sdk | 7.0 | 7.0.x |
| ibm / sdk | 8.0 | 8.0.x |
| redhat / enterprise_linux_desktop | 7.0 | 7.0.x |
| redhat / enterprise_linux_workstation | 7.0 | 7.0.x |
| redhat / satellite | 5.7 | 5.7.x |
| redhat / enterprise_linux_server | 7.0 | 7.0.x |
| redhat / enterprise_linux_desktop | 6.0 | 6.0.x |
| redhat / enterprise_linux_server | 6.0 | 6.0.x |
| redhat / enterprise_linux_workstation | 6.0 | 6.0.x |
| redhat / satellite | 5.6 | 5.6.x |
| redhat / satellite | 5.8 | 5.8.x |
| oracle / enterprise_manager_base_platform | 13.2.0.0.0 | 13.2.0.0.0.x |
| oracle / enterprise_manager_base_platform | 13.3.0.0.0 | 13.3.0.0.0.x |