Vulnerability Description
The IBMSecureRandom component in the IBMJCE and IBMSecureRandom cryptographic providers in IBM SDK Java Technology Edition 5.0 before Service Refresh 16 FP6, 6 before Service Refresh 16, 6.0.1 before Service Refresh 8, 7 before Service Refresh 7, and 7R1 before Service Refresh 1 makes it easier for context-dependent attackers to defeat cryptographic protection mechanisms by predicting the random number generator's output.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ibm | Java Sdk | 6.0.0.0 |
Related Weaknesses (CWE)
References
- http://secunia.com/advisories/59022
- http://secunia.com/advisories/59023
- http://secunia.com/advisories/59058
- http://secunia.com/advisories/61264
- http://www-01.ibm.com/support/docview.wss?uid=swg21672043Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21673836
- http://www-01.ibm.com/support/docview.wss?uid=swg21674539
- http://www-01.ibm.com/support/docview.wss?uid=swg21676672
- http://www-01.ibm.com/support/docview.wss?uid=swg21676703
- http://www-01.ibm.com/support/docview.wss?uid=swg21676746
- http://www-01.ibm.com/support/docview.wss?uid=swg21679610
- http://www-01.ibm.com/support/docview.wss?uid=swg21679713
- http://www-01.ibm.com/support/docview.wss?uid=swg21680750
- http://www-01.ibm.com/support/docview.wss?uid=swg21681256
- http://www-01.ibm.com/support/docview.wss?uid=swg21683484
FAQ
What is CVE-2014-0878?
CVE-2014-0878 is a vulnerability with a CVSS score of 5.8 (MEDIUM). The IBMSecureRandom component in the IBMJCE and IBMSecureRandom cryptographic providers in IBM SDK Java Technology Edition 5.0 before Service Refresh 16 FP6, 6 before Service Refresh 16, 6.0.1 before ...
How severe is CVE-2014-0878?
CVE-2014-0878 has been rated MEDIUM with a CVSS base score of 5.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2014-0878?
Check the references section above for vendor advisories and patch information. Affected products include: Ibm Java Sdk.