CVE-2011-1376 in IBM WebSphere
요약 (영어)
iscdeploy in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.43, 7.0 before 7.0.0.21, and 8.0 before 8.0.0.2 on the IBM i platform sets weak permissions under systemapps/isclite.ear/ and bin/client_ffdc/, which allows local users to read or modify files via standard filesystem operations.
예약하다
2011. 03. 10.
공개
2012. 01. 19.
엔트리
VulDB provides additional information and datapoints for this CVE:
| 아이디 | 취약성 | CWE | 악용 | 대책 | CVE |
|---|---|---|---|---|---|
| 4554 | IBM WebSphere Application Server iscdeploy 권한 상승 | 264 | 입증되지 않음 | 공식 수정 | CVE-2011-1376 |