CVE-2017-1382

EPSS 0.4%

Vexday Risk Score

3Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS —EPSS 0.4%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

24 jul 2017Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 might create files using the default permissions instead of the customized permissions when custom startup scripts are used. A local attacker could exploit this to gain access to files with an unknown impact. IBM X-Force ID: 127153.

Produtos afetados

IBM · WebSphere Application Server

Referências

https://exchange.xforce.ibmcloud.com/vulnerabilities/127153 http://www.ibm.com/support/docview.wss?uid=swg22004785 http://www.securityfocus.com/bid/99960 http://www.securitytracker.com/id/1038977