VULNERABILITY INTELLIGENCE
CVE-2014-0878
CVSS score5.8 MEDIUM
EPSS probability2.09%
CISA KEVNot currently listed
Published2014-05-26
Last modified2026-06-17
CVSS vectorAV:N/AC:M/Au:N/C:P/I:P/A:N
Description
The IBMSecureRandom component in the IBMJCE and IBMSecureRandom cryptographic providers in IBM SDK Java Technology Edition 5.0 before Service Refresh 16 FP6, 6 before Service Refresh 16, 6.0.1 before Service Refresh 8, 7 before Service Refresh 7, and 7R1 before Service Refresh 1 makes it easier for context-dependent attackers to defeat cryptographic protection mechanisms by predicting the random number generator's output.