CVE-2019-4473

Name of the Vulnerable Software and Affected Versions IBM SDK, Java Technology Edition versions 7, 7R, and 8 on the AIX platform Eclipse OpenJ9 (affected versions not specified)

Description The issue is related to the use of insecure absolute RPATHs in multiple binaries, which may allow local users to facilitate code injection and gain elevated privileges on the system. This could enable an attacker to inject code and gain elevated privileges.

Recommendations For IBM SDK, Java Technology Edition versions 7, 7R, and 8 on the AIX platform: consider removing or securing the absolute RPATHs to prevent code injection and privilege elevation. For Eclipse OpenJ9: at the moment, there is no information about a newer version that contains a fix for this vulnerability.