AIX builds of Eclipse OpenJ9 before 0.15.0 contain unused RPATHs which may facilitate code injection and privilege elevation by local users.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Ibm Aix | — | Apply the fix or workaround for java_july2019_advisory | Oct 11, 2019 | Jul 17, 2019 |
| Ibm Java | — | Upgrade IBM Java to version 8.0.5.40Upgrade IBM Java to version 7.1.4.50Upgrade IBM Java to version 7.0.10.50 | Oct 20, 2026 | Oct 20, 2026 |
| Ibm Was | — | Upgrade to minimal fix pack levels as required by interim fixes and then apply latest Interim Fix. | Sep 2, 2019 | Sep 2, 2019 |
| Suse | — | Upgrade java-1_7_1-ibm-alsaUpgrade java-1_7_1-ibm-jdbcUpgrade java-1_7_1-ibm-pluginUpgrade java-1_8_0-ibm-alsaUpgrade java-1_8_0-ibm-develUpgrade java-1_7_1-ibmUpgrade java-1_7_1-ibm-develUpgrade java-1_8_0-ibmUpgrade java-1_8_0-ibm-plugin | Sep 5, 2019 | Jul 17, 2019 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub