CVE-2017-1541

EPSS 1.5%

Vexday Risk Score

3Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS —EPSS 1.5%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

03 Oct 2017Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

A flaw in the AIX 5.3, 6.1, 7.1, and 7.2 JRE/SDK installp and updatep packages prevented the java.security, java.policy and javaws.policy files from being updated correctly. IBM X-Force ID: 130809.

Affected products

IBM · AIX

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://aix.software.ibm.com/aix/efixes/security/java_july2017_advisory.asc https://exchange.xforce.ibmcloud.com/vulnerabilities/130809 http://www.securityfocus.com/bid/100914 http://www.securityfocus.com/bid/100915 http://www.securitytracker.com/id/1039372