Loading HuntDB...
Hunt
Vulnerability Intelligence by wss.sh
Home Daily Briefings High Impact CVEs Recent Exploits KEV Catalog GitHub Advisories Latest Updates Security News
Sign In Sign Up

CVE-2017-1382

UNKNOWN
Published 2017-07-24T21:00:00Z
Actions:

Expert Analysis

Professional remediation guidance

Get tailored security recommendations from our analyst team for CVE-2017-1382. We'll provide specific mitigation strategies based on your environment and risk profile.

No CVSS data available

Description

IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 might create files using the default permissions instead of the customized permissions when custom startup scripts are used. A local attacker could exploit this to gain access to files with an unknown impact. IBM X-Force ID: 127153.

Available Exploits

No exploits available for this CVE.

Related News

No news articles found for this CVE.

Affected Products

IBM

WebSphere Application Server

Affected Versions:

7.0 8.0 8.5 9.0

GitHub Security Advisories

Community-driven vulnerability intelligence from GitHub

⚠ Unreviewed HIGH

GHSA-jq5v-whhp-4f84

Advisory Details

IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 might create files using the default permissions instead of the customized permissions when custom startup scripts are used. A local attacker could exploit this to gain access to files with an unknown impact. IBM X-Force ID: 127153.

CVSS Scoring

CVSS Score

7.5

CVSS Vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

References

ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2017-1382
WEB https://exchange.xforce.ibmcloud.com/vulnerabilities/127153
WEB http://www.ibm.com/support/docview.wss?uid=swg22004785
WEB http://www.securityfocus.com/bid/99960
WEB http://www.securitytracker.com/id/1038977

Advisory provided by GitHub Security Advisory Database. Published: May 13, 2022, Modified: May 13, 2022

References

http://www.securitytracker.com/id/1038977
http://www.ibm.com/support/docview.wss?uid=swg22004785
https://exchange.xforce.ibmcloud.com/vulnerabilities/127153
http://www.securityfocus.com/bid/99960
Published: 2017-07-24T21:00:00Z
Last Modified: 2024-09-16T20:36:55.830Z
Copied to clipboard!