CVE-2019-11771

AIX builds of Eclipse OpenJ9 before 0.15.0 contain unused RPATHs which may facilitate code injection and privilege elevation by local users.

Recent assessments:

timb-machine at March 05, 2021 12:25am UTC reported:

Unlikely to be setUID, unlikely that you will have write control over the vulnerable part of the RPATH at the point another user runs it. More theoretical than actual.

Assessed Attacker Value: 1
Assessed Attacker Value: 1Assessed Attacker Value: 5