The installer in IBM WebSphere Application Server (WAS) before 7.0.0.15 uses 777 permissions for a temporary log directory, which allows local users to have unintended access to log files via standard filesystem operations, a different vulnerability than CVE-2009-1173.
References
Configurations
Configuration 1 (hide)
|
Information
Published : 2011-03-08 13:59
Updated : 2011-04-20 21:00
NVD link : CVE-2011-1307
Mitre link : CVE-2011-1307
JSON object : View
CWE
CWE-264
Permissions, Privileges, and Access Controls
Products Affected
ibm
- websphere_application_server