Code Injection and Privilege Escalation in Eclipse OMR for AIX Builds
CVE-2019-11773

7.8HIGH

Key Information:

Vendor

The Eclipse Foundation

Status
Eclipse Omr
Vendor
CVE Published:
12 September 2019

What is CVE-2019-11773?

Eclipse OMR for AIX builds prior to version 0.1 is affected by a vulnerability that allows local users to exploit unused RPATHs to execute code injection attacks. This can potentially lead to privilege elevation, allowing attackers to gain unauthorized access or control over the system.

Affected Version(s)

Eclipse OMR < 0.1

References

https://bugs.eclipse.org/bugs/show_bug.cgi?id=549191
x_refsource_CONFIRM

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2019-11773 : Code Injection and Privilege Escalation in Eclipse OMR for AIX Builds