Multiple binaries in IBM SDK, Java Technology Edition 7, 7R, and 8 on the AIX platform use insecure absolute RPATHs, which may facilitate code injection and privilege elevation by local users. IBM X-Force ID: 163984.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
- CVSS 3.0 Base Score: 8.4
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Ibm Aix | — | Apply the fix or workaround for java_july2019_advisory | Oct 11, 2019 | Aug 5, 2019 |
| Ibm Java | — | Upgrade IBM Java to version 8.0.5.40Upgrade IBM Java to version 7.1.4.50Upgrade IBM Java to version 7.0.10.50 | Aug 7, 2019 | Aug 5, 2019 |
| Ibm Was | — | Upgrade to minimal fix pack levels as required by interim fixes and then apply latest Interim Fix. | Aug 5, 2019 | Aug 5, 2019 |
| Suse | — | Upgrade java-1_8_0-ibm-pluginUpgrade java-1_8_0-ibmUpgrade java-1_7_1-ibm-pluginUpgrade java-1_7_1-ibm-jdbcUpgrade java-1_8_0-ibm-develUpgrade java-1_7_1-ibmUpgrade java-1_7_1-ibm-alsaUpgrade java-1_8_0-ibm-alsaUpgrade java-1_7_1-ibm-devel | Sep 5, 2019 | Aug 5, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub