The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2016:0099 advisory.

    IBM Java SE version 7 Release 1 includes the IBM Java Runtime Environment     and the IBM Java Software Development Kit.

    This update fixes several vulnerabilities in the IBM Java Runtime     Environment and the IBM Java Software Development Kit. Further information     about these flaws can be found on the IBM Java Security alerts page, listed     in the References section. (CVE-2015-5041, CVE-2015-7575, CVE-2015-7981,     CVE-2015-8126, CVE-2015-8472, CVE-2015-8540, CVE-2016-0402, CVE-2016-0448,     CVE-2016-0466, CVE-2016-0483, CVE-2016-0494)

    Note: This update also disallows the use of the MD5 hash algorithm in the     certification path processing. The use of MD5 can be re-enabled by removing     MD5 from the jdk.certpath.disabledAlgorithms security property defined in     the java.security file.

    All users of java-1.7.1-ibm are advised to upgrade to these updated     packages, containing the IBM Java SE 7R1 SR3-FP30 release. All running     instances of IBM Java must be restarted for the update to take effect.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

RHEL 6 / 7 : java-1.7.1-ibm (RHSA-2016:0099)

critical Nessus Plugin ID 88555

Version 2.16