description: From Eclipse OpenJ9 0.15 to 0.16, access to diagnostic operations such as causing a GC or creating a diagnostic file are permitted without any privilege checks.
problem types: CWE-285: The software does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action.
affected:
{
product: Eclipse OpenJ9
vendor: The Eclipse Foundation
versions:
status: affected, version: 0.15 to 0.16 inclusive
}