CVE-2011-1307

No fix known EPSS <1%

The installer in IBM WebSphere Application Server (WAS) before 7.0.0.15 uses 777 permissions for a temporary log directory, which allows local users to have unintended access to log files via standard filesystem operations, a different vulnerability than CVE-2009-1173.

Published 2011-03-08 · CVE record · OSV

Products: ibm websphere_application_server