CVE-2017-1376

A flaw in the IBM J9 VM class verifier allows untrusted code to disable the security manager and elevate its privileges. IBM X-Force ID: 126873.

Score

CVSS 3.0 9.8 Critical

Status

Modified - psirt@us.ibm.com

Published

2017-08-29

Last modified

2024-09-16

Weaknesses

CWE-829

Affected products

• Operations Analytics Predictive Insights (Ibm)

References

• http://www.ibm.com/support/docview.wss?uid=swg22007305&myns=swgtiv&mynp=OCSSJQQ3&mync=E&cm_sp=swgtiv-_-OCSSJQQ3-_-E
• https://access.redhat.com/errata/RHSA-2017:2469
• https://access.redhat.com/errata/RHSA-2017:2481
• https://exchange.xforce.ibmcloud.com/vulnerabilities/126873