Local Code Execution Vulnerability in IBM SDK for Java

CVE-2019-4732

What is CVE-2019-4732?

A vulnerability exists in IBM SDK, Java Technology Edition that allows local authenticated attackers to execute arbitrary code due to DLL search order hijacking. This can be exploited by placing a specially-crafted file in a compromised folder, enabling the attacker to gain control of the system. This affects multiple versions of the SDK, making it critical for users to apply necessary updates to mitigate this risk.

References