AIX builds of Eclipse OpenJ9 before 0.15.0 contain unused RPATHs which may facilitate code injection and privilege elevation by local users.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Ibm Aix | — | Apply the fix or workaround for java_july2019_advisory | Oct 11, 2019 | Jul 17, 2019 |
| Ibm Java | — | Upgrade IBM Java to version 7.0.10.50Upgrade IBM Java to version 7.1.4.50Upgrade IBM Java to version 8.0.5.40 | Aug 7, 2019 | Jul 17, 2019 |
| Ibm Was | — | Upgrade to minimal fix pack levels as required by interim fixes and then apply latest Interim Fix. | Jul 17, 2019 | Jul 17, 2019 |
| Suse | — | Upgrade java-1_8_0-ibm-pluginUpgrade java-1_7_1-ibm-develUpgrade java-1_8_0-ibmUpgrade java-1_8_0-ibm-alsaUpgrade java-1_7_1-ibm-alsaUpgrade java-1_7_1-ibm-jdbcUpgrade java-1_7_1-ibm-pluginUpgrade java-1_7_1-ibmUpgrade java-1_8_0-ibm-devel | Sep 5, 2019 | Jul 17, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub