CVE-2018-1890 IBM SDK, Java Technology Edition Version 8 on the AIX platform uses absolute RPATHs which may facilitate code injection and privilege elevation by local users. IBM X-Force ID: 152081.
HighCVSS 7.8
EPSS 0.46%
- Published
- Updated
- Exploit status
- No public exploit known
Description
IBM SDK, Java Technology Edition Version 8 on the AIX platform uses absolute RPATHs which may facilitate code injection and privilege elevation by local users. IBM X-Force ID: 152081.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm sdk | = 8.0 | No fix listed |
| ibm WebSphere Application Server Patterns | = 1.0.0.0 | No fix listed |
| ibm WebSphere Application Server Patterns | = 1.0.0.7 | No fix listed |
| ibm WebSphere Application Server Patterns | = 2.2.0.0 | No fix listed |
| ibm WebSphere Application Server Patterns | = 2.2.5.3 | No fix listed |
| ibm websphere application server | = 7.0 | No fix listed |
| ibm websphere application server | = 8.0 | No fix listed |
| ibm websphere application server | = 8.5 | No fix listed |
| ibm websphere application server | = 9.0 | No fix listed |
| ibm websphere application server | = Liberty | No fix listed |
| ibm runtimes for java technology | All versions | No fix listed |
References
- 107448 third-party-advisory vdb-entry
- ibm-sdk-cve20181890-code-exec(152081) vdb-entry vendor-advisory
- www.ibm.com patch vendor-advisory
- www.ibm.com patch vendor-advisory
- www.ibm.com patch vendor-advisory