PT-2017-13131 · Ibm · Ibm Websphere Application Server

Publicado 2017-07-24 · Atualizado 2019-10-03 · CVE-2017-1382

Positive Technologies (AI Summary)

CVSS v3.1

7.1

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server versions 7.0 through 9.0

Description The issue allows a local attacker to potentially gain access to files with unknown impact due to the application server creating files using default permissions instead of customized permissions when custom startup scripts are used.

Recommendations For IBM WebSphere Application Server versions 7.0 through 9.0, consider modifying the custom startup scripts to ensure files are created with the intended customized permissions until a fix is available.

Correção

Incorrect Default Permissions

Enumeração de Fraquezas

CWE-276

Identificadores relacionados

CVE-2017-1382

Produtos afetados

Ibm Websphere Application Server

Referências · 6

• https://nvd.nist.gov/vuln/detail/CVE-2017-1382 · Nota de Segurança
• http://ibm.com/support/docview.wss?uid=swg22004785 · Aviso do Fabricante
• http://securitytracker.com/id/1038977 · Nota
• https://osv.dev/vulnerability/CVE-2017-1382 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/127153 · Aviso do Fabricante
• http://securityfocus.com/bid/99960 · Nota