← Back

CVE-2017-1376

nvd nist
Published: Aug 29, 2017Modified: May 13, 2026

JSON object

Loading...
9.8
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: NVD

Description

A flaw in the IBM J9 VM class verifier allows untrusted code to disable the security manager and elevate its privileges. IBM X-Force ID: 126873.

Affected (6)

Ibm
1 product
Operations Analytics Predictive Insights
Configuration A
6 vulnerable
Vulnerable SoftwareAffected Versions
Ibm
Operations Analytics Predictive Insights
Version 1.3.0
Operations Analytics Predictive Insights
Version 1.3.1
Operations Analytics Predictive Insights
Version 1.3.2
Operations Analytics Predictive Insights
Version 1.3.3
Operations Analytics Predictive Insights
Version 1.3.5
Operations Analytics Predictive Insights
Version 1.3.6

Related CWEs

CWE-829
Inclusion of Functionality from Untrusted Control Sphere
The product imports, requires, or includes executable functionality (such as a library) from a source that is outside of the intended control sphere.

References (8)

Source: psirt@us.ibm.com
Vendor Advisory
Source: psirt@us.ibm.com
Source: psirt@us.ibm.com
Source: psirt@us.ibm.com
VDB EntryVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
VDB EntryVendor Advisory

Timeline

No history available yet.