Code Injection and Privilege Elevation Vulnerability in Eclipse OpenJ9 for AIX
CVE-2019-11771

7.8HIGH

Key Information:

Vendor

The Eclipse Foundation

Status
Eclipse Openj9
Vendor
CVE Published:
17 July 2019

What is CVE-2019-11771?

AIX builds of Eclipse OpenJ9 prior to version 0.15.0 are susceptible to a security vulnerability due to the presence of unused RPATHs. This may allow local users to inject malicious code and elevate their privileges, potentially compromising the system’s integrity. Proper security measures should be taken to address this issue and safeguard against exploitation.

Affected Version(s)

Eclipse OpenJ9 < 0.15.0

References

https://bugs.eclipse.org/bugs/show_bug.cgi?id=548055
x_refsource_CONFIRM

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.