Home

CVE-2019-4473

Description

Multiple binaries in IBM SDK, Java Technology Edition 7, 7R, and 8 on the AIX platform use insecure absolute RPATHs, which may facilitate code injection and privilege elevation by local users. IBM X-Force ID: 163984.

Risk Information

Base Score
7.8
MODERATE
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
0.049

Associated Vulnerability

VulnerabilityOS Platform
Multiple Vulnerabilities are affected in IBM Operational Decision Manager 8.10Windows
Multiple Vulnerabilities are affected in IBM Cognos Analytics 11.0Windows
Multiple Vulnerabilities are affected in IBM Cognos Analytics 11.1Windows
Multiple Vulnerabilities are affected in IBM Operational Decision Manager 8.6Windows
Multiple Vulnerabilities are affected in IBM Operational Decision Manager 8.7Windows
Multiple Vulnerabilities are affected in IBM Operational Decision Manager 8.8Windows
Multiple Vulnerabilities are affected in IBM Operational Decision Manager 8.9Windows
Multiple Vulnerabilities are affected in IBM MQ 8.0Windows
Multiple Vulnerabilities are affected in IBM MQ 9.0Windows
SUSE-SU-2019:2336-1(SUSE Linux Enterprise Server 12-SP4 ) java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64.rpmLinux
SUSE-SU-2019:2336-1(SUSE Linux Enterprise Server 12-SP4 ) java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64.rpmLinux
SUSE-SU-2019:2336-1(SUSE Linux Enterprise Server 12-SP4 ) java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64.rpmLinux
SUSE-SU-2019:2336-1(SUSE Linux Enterprise Server 12-SP4 ) java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64.rpmLinux
SUSE-SU-2019:2371-1(SUSE Linux Enterprise Server 12-SP4 ) java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64.rpmLinux
SUSE-SU-2019:2371-1(SUSE Linux Enterprise Server 12-SP4 ) java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64.rpmLinux
SUSE-SU-2019:2371-1(SUSE Linux Enterprise Server 12-SP4 ) java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64.rpmLinux
SUSE-SU-2019:2336-1(SUSE Linux Enterprise Server 12-SP5) java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64_12_SP5.rpmLinux
SUSE-SU-2019:2336-1(SUSE Linux Enterprise Server 12-SP5) java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64_12_SP5.rpmLinux
SUSE-SU-2019:2336-1(SUSE Linux Enterprise Server 12-SP5) java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64_12_SP5.rpmLinux
SUSE-SU-2019:2336-1(SUSE Linux Enterprise Server 12-SP5) java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64_12_SP5.rpmLinux
SUSE-SU-2019:2371-1(SUSE Linux Enterprise Server 12-SP5) java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64_12_SP5.rpmLinux
SUSE-SU-2019:2371-1(SUSE Linux Enterprise Server 12-SP5) java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64_12_SP5.rpmLinux
SUSE-SU-2019:2371-1(SUSE Linux Enterprise Server 12-SP5) java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64_12_SP5.rpmLinux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234