CVE-2017-1541 Misconfiguration in AIX
A flaw in IBM AIX JRE/SDK packages prevented security policy files from updating, potentially allowing security bypasses.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2017-1541?
CVE-2017-1541 is a high-severity vulnerability in Ibm Aix, published on 3 Oct 2017. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A flaw in the AIX 5.3, 6.1, 7.1, and 7.2 JRE/SDK installp and updatep packages prevented the java.security, java.policy and javaws.policy files from being updated correctly. IBM X-Force ID: 130809.
Weakness: CWE-20
Which versions are affected by CVE-2017-1541?
It affects 1 product.
Products include Ibm Aix.
How do I fix CVE-2017-1541?
No fix has been published for CVE-2017-1541 yet. Limit exposure of the affected software until one is available.
Is CVE-2017-1541 being exploited?
There is no known exploitation of CVE-2017-1541 in the wild and no public exploit code.
Other vulnerabilities in Ibm Aix
Sources
Also known as GHSA-ghvw-mhmc-2m87.