Vulnerability in IBM Websphere Application Server
CVE-2009-1173
IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.3 uses weak permissions (777) for files associated with unspecified "interim fixes," which allows attackers to modify files that would not have been accessible if the intended 755 permissions were used.
EPSS: 0.003 (26.9th percentile) — read the EPSS interpretation.
Affected products
- Ibm Websphere_application_server — versions 7.0, 7.0.0.1
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (Patch, vdb-entry, x_refsource_VUPEN, Vendor Advisory)
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (x_refsource_SECUNIA, third-party-advisory)
- cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- cve@mitre.org (vendor-advisory, x_refsource_AIXAPAR)
- cve@mitre.org (x_refsource_CONFIRM, Patch)
- cve@mitre.org (vendor-advisory, x_refsource_AIXAPAR)