CVE-2018-12539

JDK: privilege escalation via insufficiently restricted access to Attach API

Severity Score

7.8

*CVSS v3

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

In Eclipse OpenJ9 version 0.8, users other than the process owner may be able to use Java Attach API to connect to an Eclipse OpenJ9 or IBM JVM on the same machine and use Attach API operations, which includes the ability to execute untrusted native code. Attach API is enabled by default on Windows, Linux and AIX JVMs and can be disabled using the command line option -Dcom.ibm.tools.attach.enable=no.

En Eclipse OpenJ9 0.8, otros usuarios diferentes al propietario del proceso podrían emplear la API Java Attach para conectarse a Eclipse OpenJ9 o IBM JVM en el mismo equipo y emplear operaciones Attach API, que incluyen la capacidad de ejecutar código nativo no fiable. Attach API está habilitado por defecto en Windows, Linux y AIX JVM y puede deshabilitarse mediante la opción de línea de comandos -Dcom.ibm.tools.attach.enable=no.

*Credits: N/A

CVSS Scores

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Attack Vector

Local

Attack Complexity

Low

Authentication

None

Confidentiality

Partial

Integrity

Partial

Availability

Partial

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2018-06-18 CVE Reserved
2018-08-14 CVE Published
2023-08-08 EPSS Updated
2024-08-05 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-287: Improper Authentication
CWE-419: Unprotected Primary Channel
CWE-502: Deserialization of Untrusted Data

CAPEC

References (12)

URL	Tag	Source
http://www.securityfocus.com/bid/105126	Third Party Advisory
http://www.securitytracker.com/id/1041765	Third Party Advisory
https://bugs.eclipse.org/bugs/show_bug.cgi?id=534589	Issue Tracking

URL	Date	SRC

URL	Date	SRC
https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html	2019-10-09

URL	Date	SRC
https://access.redhat.com/errata/RHSA-2018:2568	2019-10-09
https://access.redhat.com/errata/RHSA-2018:2569	2019-10-09
https://access.redhat.com/errata/RHSA-2018:2575	2019-10-09
https://access.redhat.com/errata/RHSA-2018:2576	2019-10-09
https://access.redhat.com/errata/RHSA-2018:2712	2019-10-09
https://access.redhat.com/errata/RHSA-2018:2713	2019-10-09
https://access.redhat.com/security/cve/CVE-2018-12539	2018-09-17
https://bugzilla.redhat.com/show_bug.cgi?id=1618767	2018-09-17

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Eclipse Search vendor "Eclipse"		Openj9 Search vendor "Eclipse" for product "Openj9"				0.8 Search vendor "Eclipse" for product "Openj9" and version "0.8"		-		Affected
Oracle Search vendor "Oracle"		Enterprise Manager Base Platform Search vendor "Oracle" for product "Enterprise Manager Base Platform"				13.2.0.0.0 Search vendor "Oracle" for product "Enterprise Manager Base Platform" and version "13.2.0.0.0"		-		Affected
Oracle Search vendor "Oracle"		Enterprise Manager Base Platform Search vendor "Oracle" for product "Enterprise Manager Base Platform"				13.3.0.0.0 Search vendor "Oracle" for product "Enterprise Manager Base Platform" and version "13.3.0.0.0"		-		Affected