NetSight
IP …
high7.1

CVE-2017-1382

IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 might create files using the default permissions instead of the customized permissions when custom star…

Impact

IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 might create files using the default permissions instead of the customized permissions when custom startup scripts are used. A local attacker could exploit this to gain access to files with an unknown impact. IBM X-Force ID: 127153.

Affected products

VendorProductAffected versions
IbmWebsphere Application Server
from 7.0.0.0 through 7.0.0.43
from 8.0.0.0 through 8.0.0.13
from 8.5.0.0 through 8.5.5.12
from 9.0.0.0 through 9.0.0.4

Weakness classification

CWE-276

References