CVE-2009-1173

IBM WebSphere Application Server 7.0 - Unprotected File Modification via Weak Interim Fix Permissions

Title source: llm
STIX 2.1

Description

IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.3 uses weak permissions (777) for files associated with unspecified "interim fixes," which allows attackers to modify files that would not have been accessible if the intended 755 permissions were used.

References (7)

Core 7
Core References
Patch, Vendor Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2009/0854
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/34259
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/34131
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/34461
Various Sources vendor-advisory x_refsource_aixapar
http://www-01.ibm.com/support/docview.wss?uid=swg1PK77590
Various Sources vendor-advisory x_refsource_aixapar
http://www-01.ibm.com/support/docview.wss?uid=swg1PK82988

Scores

EPSS 0.0034
EPSS Percentile 26.8%

Details

CWE
CWE-264
Status published
Products (2)
ibm/websphere_application_server 7.0
ibm/websphere_application_server 7.0.0.1
Published Mar 31, 2009
Tracked Since Feb 18, 2026