← back
CVE-2017-1382

CVE-2017-1382

EPSS 0.4%
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 0.4%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
24 Jul 2017Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 might create files using the default permissions instead of the customized permissions when custom startup scripts are used. A local attacker could exploit this to gain access to files with an unknown impact. IBM X-Force ID: 127153.
Affected products
IBM · WebSphere Application Server
References
https://exchange.xforce.ibmcloud.com/vulnerabilities/127153http://www.ibm.com/support/docview.wss?uid=swg22004785http://www.securityfocus.com/bid/99960http://www.securitytracker.com/id/1038977