CVE-2014-0878

IBM SDK Java Technology Edition - Predictable Random Number Generation in IBMSecureRandom

Title source: llm
STIX 2.1

Description

The IBMSecureRandom component in the IBMJCE and IBMSecureRandom cryptographic providers in IBM SDK Java Technology Edition 5.0 before Service Refresh 16 FP6, 6 before Service Refresh 16, 6.0.1 before Service Refresh 8, 7 before Service Refresh 7, and 7R1 before Service Refresh 1 makes it easier for context-dependent attackers to defeat cryptographic protection mechanisms by predicting the random number generator's output.

References (22)

Core 22
Core References
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/59022
Various Sources x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21680750
Various Sources x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21679610
Various Sources x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21676672
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/59058
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/61264
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/91084
Vendor Advisory x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21689593
Various Sources x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21681256
Various Sources x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21674539
Vendor Advisory x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21686717
Various Sources x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21683484
Various Sources x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21673836
Various Sources x_refsource_confirm
http://www.ibm.com/support/docview.wss?uid=swg21677387
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/59023
Various Sources x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21676746
Vendor Advisory x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21672043
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/67601
Various Sources x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21679713
Various Sources x_refsource_confirm
http://www.ibm.com/support/docview.wss?uid=swg21675343
Various Sources x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21676703
Various Sources x_refsource_confirm
http://www.ibm.com/support/docview.wss?uid=swg21675588

Scores

EPSS 0.0209
EPSS Percentile 79.7%

Details

CWE
CWE-310
Status published
Products (50)
ibm/java_sdk 6.0.0.0
ibm/java_sdk 6.0.1.0
ibm/java_sdk 6.0.2.0
ibm/java_sdk 6.0.3.0
ibm/java_sdk 6.0.4.0
ibm/java_sdk 6.0.5.0
ibm/java_sdk 6.0.6.0
ibm/java_sdk 6.0.7.0
ibm/java_sdk 6.0.8.0
ibm/java_sdk 6.0.8.1
... and 40 more
Published May 26, 2014
Tracked Since Feb 18, 2026