Home

CVE-2019-17631

Description

From Eclipse OpenJ9 0.15 to 0.16, access to diagnostic operations such as causing a GC or creating a diagnostic file are permitted without any privilege checks.

Risk Information

Base Score
9.1
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
EPSS Score
Exploitation Probability
0.497

Associated Vulnerability

VulnerabilityOS Platform
Multiple Vulnerabilities are affected in IBM TXSeries for Multiplatforms 8.1Windows
Multiple Vulnerabilities are affected in IBM TXSeries for Multiplatforms 9.1Windows
Multiple Vulnerabilities are affected in IBM Tivoli Monitoring 6.3.0Windows
Multiple Vulnerabilities are affected in IBM TXSeries for Multiplatforms 8.2Windows
Multiple Vulnerabilities are affected in IBM Tivoli Application Dependency Discovery Manager 7.3.0Windows
(RHSA-2019:4113) java-1.8.0-ibm security update java-1.8.0-ibm-1.8.0.6.0-1jpp.1.el6_10.i686.rpmLinux
(RHSA-2019:4113) java-1.8.0-ibm security update java-1.8.0-ibm-1.8.0.6.0-1jpp.1.el6_10.x86_64.rpmLinux
(RHSA-2019:4113) java-1.8.0-ibm security update java-1.8.0-ibm-demo-1.8.0.6.0-1jpp.1.el6_10.i686.rpmLinux
(RHSA-2019:4113) java-1.8.0-ibm security update java-1.8.0-ibm-demo-1.8.0.6.0-1jpp.1.el6_10.x86_64.rpmLinux
(RHSA-2019:4113) java-1.8.0-ibm security update java-1.8.0-ibm-devel-1.8.0.6.0-1jpp.1.el6_10.i686.rpmLinux
(RHSA-2019:4113) java-1.8.0-ibm security update java-1.8.0-ibm-devel-1.8.0.6.0-1jpp.1.el6_10.x86_64.rpmLinux
(RHSA-2019:4113) java-1.8.0-ibm security update java-1.8.0-ibm-jdbc-1.8.0.6.0-1jpp.1.el6_10.i686.rpmLinux
(RHSA-2019:4113) java-1.8.0-ibm security update java-1.8.0-ibm-jdbc-1.8.0.6.0-1jpp.1.el6_10.x86_64.rpmLinux
(RHSA-2019:4113) java-1.8.0-ibm security update java-1.8.0-ibm-plugin-1.8.0.6.0-1jpp.1.el6_10.i686.rpmLinux
(RHSA-2019:4113) java-1.8.0-ibm security update java-1.8.0-ibm-plugin-1.8.0.6.0-1jpp.1.el6_10.x86_64.rpmLinux
(RHSA-2019:4113) java-1.8.0-ibm security update java-1.8.0-ibm-src-1.8.0.6.0-1jpp.1.el6_10.i686.rpmLinux
(RHSA-2019:4113) java-1.8.0-ibm security update java-1.8.0-ibm-src-1.8.0.6.0-1jpp.1.el6_10.x86_64.rpmLinux
(RHSA-2019:4115) java-1.8.0-ibm security update java-1.8.0-ibm-1.8.0.6.0-1jpp.1.el7.x86_64.rpmLinux
(RHSA-2019:4115) java-1.8.0-ibm security update java-1.8.0-ibm-demo-1.8.0.6.0-1jpp.1.el7.x86_64.rpmLinux
(RHSA-2019:4115) java-1.8.0-ibm security update java-1.8.0-ibm-devel-1.8.0.6.0-1jpp.1.el7.x86_64.rpmLinux
(RHSA-2019:4115) java-1.8.0-ibm security update java-1.8.0-ibm-jdbc-1.8.0.6.0-1jpp.1.el7.x86_64.rpmLinux
(RHSA-2019:4115) java-1.8.0-ibm security update java-1.8.0-ibm-plugin-1.8.0.6.0-1jpp.1.el7.x86_64.rpmLinux
(RHSA-2019:4115) java-1.8.0-ibm security update java-1.8.0-ibm-src-1.8.0.6.0-1jpp.1.el7.x86_64.rpmLinux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234