PT-2019-17099 · Ibm+2 · Ibm Sdk+3

Published

2019-08-05

·

Updated

2023-01-31

·

CVE-2019-4473

CVSS v3.1

7.8

High

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions IBM SDK, Java Technology Edition versions 7, 7R, and 8 on the AIX platform Eclipse OpenJ9 (affected versions not specified)
Description The issue is related to the use of insecure absolute RPATHs in multiple binaries, which may allow local users to facilitate code injection and gain elevated privileges on the system. This could enable an attacker to inject code and gain elevated privileges.
Recommendations For IBM SDK, Java Technology Edition versions 7, 7R, and 8 on the AIX platform: consider removing or securing the absolute RPATHs to prevent code injection and privilege elevation. For Eclipse OpenJ9: at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Uncontrolled Search Path Element

Weakness Enumeration

CWE-427

Related Identifiers

CVE-2019-4473
SUSE-SU-2019:14160-1
SUSE-SU-2019:14188-1
SUSE-SU-2019:2291-1
SUSE-SU-2019:2336-1
SUSE-SU-2019:2371-1
SUSE-SU-2019_14160-1

Affected Products

Eclipse Openj9
Ibm Aix
Ibm Sdk
Suse