CVE-2018-1417

Published: Feb 22, 2018Modified: Nov 21, 2024

8.1

Vector

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.2 / Impact: 5.9

Source: NVD

Description

Under certain circumstances, a flaw in the J9 JVM (IBM SDK, Java Technology Edition 7.1 and 8.0) allows untrusted code running under a security manager to elevate its privileges. IBM X-Force ID: 138823.

Affected (5)

Products: Ibm: Java Sdk

Ibm

1 product

Java Sdk

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Ibm Java Sdk	Version 6.0.0.0
Ibm Java Sdk	Version 6.1.0.0
Ibm Java Sdk	Version 7.0.0.0
Ibm Java Sdk	Version 7.1.0.0
Ibm Java Sdk	Version 8.0.0.0

Related CWEs

CWE-732

Incorrect Permission Assignment for Critical Resource

The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.

References (14)

http://www.ibm.com/support/docview.wss?uid=isg3T1027315

Source: psirt@us.ibm.com

http://www.ibm.com/support/docview.wss?uid=swg22014937

Source: psirt@us.ibm.com

http://www.securityfocus.com/bid/103216

Source: psirt@us.ibm.com

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1040403

Source: psirt@us.ibm.com

Third Party AdvisoryVDB Entry

https://access.redhat.com/errata/RHSA-2018:1463

Source: psirt@us.ibm.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/138823

Source: psirt@us.ibm.com

VDB EntryVendor Advisory

https://www.ibm.com/support/docview.wss?uid=swg22012965

Source: psirt@us.ibm.com

Vendor Advisory

http://www.ibm.com/support/docview.wss?uid=isg3T1027315