critical9.8
CVE-2017-1376
A flaw in the IBM J9 VM class verifier allows untrusted code to disable the security manager and elevate its privileges.
Impact
A flaw in the IBM J9 VM class verifier allows untrusted code to disable the security manager and elevate its privileges. IBM X-Force ID: 126873.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Operations Analytics Predictive Insights | Versions 1.3.0, 1.3.1, 1.3.2, 1.3.3, 1.3.5, 1.3.6 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.ibm.com/support/docview.wss?uid=swg22007305&myns=swgtiv&mynp=OCSSJQQ3&mync=E&cm_sp=swgtiv-_-OCSSJQQ3-_-E
- https://access.redhat.com/errata/RHSA-2017:2469
- https://access.redhat.com/errata/RHSA-2017:2481
- https://exchange.xforce.ibmcloud.com/vulnerabilities/126873
- http://www.ibm.com/support/docview.wss?uid=swg22007305&myns=swgtiv&mynp=OCSSJQQ3&mync=E&cm_sp=swgtiv-_-OCSSJQQ3-_-E
- https://access.redhat.com/errata/RHSA-2017:2469
- https://access.redhat.com/errata/RHSA-2017:2481
- https://exchange.xforce.ibmcloud.com/vulnerabilities/126873