NetSight
IP …
low2.1

CVE-2011-1307

The installer in IBM WebSphere Application Server (WAS) before 7.0.0.15 uses 777 permissions for a temporary log directory, which allows local users to have un…

Impact

The installer in IBM WebSphere Application Server (WAS) before 7.0.0.15 uses 777 permissions for a temporary log directory, which allows local users to have unintended access to log files via standard filesystem operations, a different vulnerability than CVE-2009-1173.

Affected products

VendorProductAffected versions
IbmWebsphere Application Server
through 7.0.0.13
Versions 2.0, 3.0, 3.0.2, 3.0.2.1, 3.0.2.2

Weakness classification

CWE-264

References