CVE-2019-4473

HIGH

IBM SDK - Code Injection

Title source: llm

Description

Multiple binaries in IBM SDK, Java Technology Edition 7, 7R, and 8 on the AIX platform use insecure absolute RPATHs, which may facilitate code injection and privilege elevation by local users. IBM X-Force ID: 163984.

References (2)

Scores

CVSS v3 7.8
EPSS 0.0005
EPSS Percentile 15.1%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Classification

CWE
CWE-427
Status published

Affected Products (3)

ibm/java
ibm/java
ibm/java

Timeline

Published Aug 05, 2019
Tracked Since Feb 18, 2026