cvedb.io
CVE-2017-1382
HIGH · CVSS 7.1
EPSS exploitation probability: 0%
Published 2017-07-24T21:29:00.390 · Last modified 2026-06-17T01:14:20.940

Summary

IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 might create files using the default permissions instead of the customized permissions when custom startup scripts are used. A local attacker could exploit this to gain access to files with an unknown impact. IBM X-Force ID: 127153.

Affected products

ibm — websphere_application_server

Does this affect you?

Add your gear to cvedb and we'll alert you only when ibm ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.