| Package | Affected versions | Patched versions |
|---|---|---|
| websphere application server | = 6.1= 6.1.0.1= 6.1.0.11= 6.1.0.13= 6.1.0.15= 6.1.0.17= 6.1.0.19= 6.1.0.21= 6.1.0.23= 6.1.0.25= 6.1.0.27= 6.1.0.29= 6.1.0.3= 6.1.0.31= 6.1.0.33= 6.1.0.35= 6.1.0.37= 6.1.0.39= 6.1.0.41= 6.1.0.5= 6.1.0.7= 6.1.0.9= 7.0= 7.0.0.1= 7.0.0.11= 7.0.0.13= 7.0.0.15= 7.0.0.17= 7.0.0.19= 7.0.0.3= 7.0.0.5= 7.0.0.7= 7.0.0.9= 8.0= 8.0.0.1 |
iscdeploy in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.43, 7.0 before 7.0.0.21, and 8.0 before 8.0.0.2 on the IBM i platform sets weak permissions under systemapps/isclite.ear/ and bin/client_ffdc/, which allows local users to read or modify files via standard filesystem operations.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free