IBM Java SDK CVE-2018-1417 Remote Privilege Escalation Vulnerability

Bugtraq ID:	103216
Class:	Design Error
CVE:	CVE-2018-1417
Remote:	Yes
Local:	No
Published:	Feb 20 2018 12:00AM
Updated:	Feb 20 2018 12:00AM
Credit:	IBM
Vulnerable:	IBM Java SDK 8 SR 5 FP 7 IBM Java SDK 7R1 SR 4 FP 5 IBM Java SDK 7R1 SR 4 FP 15 IBM Java SDK 7R1 SR 4 FP 1 IBM Java SDK 7 SR 10 FP 5 IBM Java SDK 7 SR 10 FP 15 IBM Java SDK 7 SR 10 FP 1 IBM Java SDK 6R1 SR 8 FP 7 IBM Java SDK 6R1 SR 8 FP 55 IBM Java SDK 6R1 SR 8 FP 5 IBM Java SDK 6R1 SR 8 FP 45 IBM Java SDK 6R1 SR 8 FP 41 IBM Java SDK 6R1 SR 8 FP 30 IBM Java SDK 6R1 SR 8 FP 26 IBM Java SDK 6R1 SR 8 FP 25 IBM Java SDK 6R1 SR 8 FP 21 IBM Java SDK 6R1 SR 8 FP 15 IBM Java SDK 6 SR 16 FP 55 IBM Java SDK 6 SR 16 FP 5 IBM Java SDK 6 SR 16 FP 45 IBM Java SDK 6 SR 16 FP 41 IBM Java SDK 6 SR 16 FP 30 IBM Java SDK 6 SR 16 FP 26 IBM Java SDK 6 SR 16 FP 25 IBM Java SDK 6 SR 16 FP 22 IBM Java SDK 6 SR 16 FP 15
Not Vulnerable:	IBM Java SDK 8 SR 5 FP 10 IBM Java SDK 7R1 SR 4 FP 20 IBM Java SDK 7 SR 10 FP 20 IBM Java SDK 6R1 SR 8 FP 60 IBM Java SDK 6 SR 16 FP 60

IBM Java SDK CVE-2018-1417 Remote Privilege Escalation Vulnerability

IBM Java SDK is prone to a remote privilege-escalation vulnerability.

An attacker can exploit this issue to gain elevated privileges on an affected system.

The following versions are vulnerable:

Java SDK 6 Service Refresh 16 Fix Pack 55 and prior
Java SDK 6R1 Service Refresh 8 Fix Pack 55 and prior
Java SDK 7 Service Refresh 10 Fix Pack 15 and prior
Java SDK 7R1 Service Refresh 4 Fix Pack 15 and prior
Java SDK 8 Service Refresh 5 Fix Pack 7 and prior