1. Home
  2. CVE Database
  3. CVE-2019-11771
HIGH · 7.8

CVE-2019-11771

AIX builds of Eclipse OpenJ9 before 0.15.0 contain unused RPATHs which may facilitate code injection and privilege elevation by local users.

Vulnerability Description

AIX builds of Eclipse OpenJ9 before 0.15.0 contain unused RPATHs which may facilitate code injection and privilege elevation by local users.

CVSS Score

7.8

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
EclipseOpenj9< 0.15.0

Related Weaknesses (CWE)

CWE-264

References

FAQ

What is CVE-2019-11771?

CVE-2019-11771 is a vulnerability with a CVSS score of 7.8 (HIGH). AIX builds of Eclipse OpenJ9 before 0.15.0 contain unused RPATHs which may facilitate code injection and privilege elevation by local users.

How severe is CVE-2019-11771?

CVE-2019-11771 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2019-11771?

Check the references section above for vendor advisories and patch information. Affected products include: Eclipse Openj9.