CVE-2018-1386

HIGH 7.8CVE-2018-1386 · Published 14/03/2018 · updated 17/06/2026

In short

CVE-2018-1386 is a HIGH (CVSS 7.8) vulnerability affecting tivoli workload scheduler (ibm).
Chance of exploitation in the next 30 days (EPSS): 0.28%, higher than 20.9% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
tivoli workload scheduler ibm	`= 8.6= 9.1= 9.2= 9.3= 9.4`	No fix yet

Description

IBM Tivoli Workload Automation for AIX (IBM Workload Scheduler 8.6, 9.1, 9.2, 9.3, and 9.4) contains directories with improper permissions that could allow a local user to with special access to gain root privileges. IBM X-Force ID: 138208.

References

ibm.com/support/docview.wss · Vendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/138208 · VDB Entry

More vulnerabilities in tivoli workload scheduler

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

tivoli workload scheduler

ibm

= 8.6= 9.1= 9.2= 9.3= 9.4

No fix yet

More vulnerabilities in tivoli workload scheduler

See all →