suse · CVE-2018-1890

Quick triage

View at Official suse advisory, NVD, CVE.org · CVE detail

Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.

Tracker summary

CVE-2018-1890 severity moderate: SUSE including 21 source package names (java-1_7_0-ibm, java-1_7_1-ibm, …), 391 product×package rows across 133 product lines (HPE Helion OpenStack 8, Image SLES15-SAP-Azure, … (133 product lines)): Fixed 271, Known Not Affected 120.

Description:

IBM SDK, Java Technology Edition Version 8 on the AIX platform uses absolute RPATHs which may facilitate code injection and privilege elevation by local users. IBM X-Force ID: 152081.