IBM SDK, Java Technology Edition Version 8 on the AIX platform uses absolute RPATHs which may facilitate code injection and privilege elevation by local users. IBM X-Force ID: 152081.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.0 Base Score: 5.6
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Ibm Aix | — | Apply the fix or workaround for java_jan2019_advisory | Apr 23, 2019 | Mar 11, 2019 |
| Ibm Java | — | Upgrade IBM Java to version 8.0.5.30 | Mar 12, 2019 | Mar 11, 2019 |
| Ibm Was | — | Upgrade to minimal fix pack levels as required by interim fixes and then apply latest Interim Fix. | Mar 11, 2019 | Mar 11, 2019 |
| Suse | — | Upgrade java-1_8_0-ibmUpgrade java-1_8_0-ibm-alsaUpgrade java-1_8_0-ibm-develUpgrade java-1_8_0-ibm-plugin | Mar 16, 2019 | Mar 11, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub