CVEvulnerability
CVE-2013-4006
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2013-11-18
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-310
Description
IBM WebSphere Application Server (WAS) Liberty Profile 8.5 before 8.5.5.1 uses weak permissions for unspecified files, which allows local users to obtain sensitive information via standard filesystem operations.
Affected configurations
• ibm websphere application server 8.5.0.0
• ibm websphere application server 8.5.0.1
• ibm websphere application server 8.5.0.2
• ibm websphere application server 8.5.5.0
Related
Weakness · not in database (1)
References
- http://www-01.ibm.com/support/docview.wss?&uid=swg21651880 Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg1PM90472 www-01.ibm.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/85273 exchange.xforce.ibmcloud.com
- http://www-01.ibm.com/support/docview.wss?&uid=swg21651880 Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg1PM90472 www-01.ibm.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/85273 exchange.xforce.ibmcloud.com