CVE-2019-17631
17.10.2019, 18:15
From Eclipse OpenJ9 0.15 to 0.16, access to diagnostic operations such as causing a GC or creating a diagnostic file are permitted without any privilege checks.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| eclipse | openj9 | 0.15.0 ≤ 𝑥 ≤ 0.16.0 |
| redhat | satellite | 5.8 |
| redhat | enterprise_linux | 8.0 |
| redhat | enterprise_linux_desktop | 6.0 |
| redhat | enterprise_linux_desktop | 7.0 |
| redhat | enterprise_linux_eus | 8.1 |
| redhat | enterprise_linux_server | 6.0 |
| redhat | enterprise_linux_server | 7.0 |
| redhat | enterprise_linux_workstation | 6.0 |
| redhat | enterprise_linux_workstation | 7.0 |
𝑥
= Vulnerable software versions
Red Hat Enterprise Linux Releases
Red Hat Product | |||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
| java-1.8.0-ibm |
| ||||||||||
| java-1.8.0-ibm-demo |
| ||||||||||
| java-1.8.0-ibm-devel |
| ||||||||||
| java-1.8.0-ibm-headless |
| ||||||||||
| java-1.8.0-ibm-jdbc |
| ||||||||||
| java-1.8.0-ibm-plugin |
| ||||||||||
| java-1.8.0-ibm-src |
| ||||||||||
| java-1.8.0-ibm-webstart |
|
Common Weakness Enumeration
- CWE-285 - Improper AuthorizationThe software does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action.
- CWE-269 - Improper Privilege ManagementThe software does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.
References