CVE-2016-0380

LOW

IBM Sterling Connect:Direct for Unix <4.1.0.4-4.2.0.4 - Info Disclo...

Title source: llm

Description

IBM Sterling Connect:Direct for Unix 4.1.0 before 4.1.0.4 iFix073 and 4.2.0 before 4.2.0.4 iFix003 uses default file permissions of 0664, which allows local users to obtain sensitive information via standard filesystem operations.

References (3)

Core 3

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/92336

Mitigation, Patch, Vendor Advisory x_refsource_confirm

http://www-01.ibm.com/support/docview.wss?uid=swg21988278

Patch, Vendor Advisory vendor-advisory x_refsource_aixapar

http://www-01.ibm.com/support/docview.wss?uid=swg1IT14769

Scores

CVSS v3 3.3

EPSS 0.0031

EPSS Percentile 23.3%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Details

CWE

CWE-264

Status published

Products (1)

ibm/sterling_connect\ direct 4.1.0.0 (10 CPE variants)

Published Aug 08, 2016

Tracked Since Feb 18, 2026