CVEvulnerability
CVE-2016-0380
3.3 LOW
Official page ↗
- Status
- Modified
- Published
- 2016-08-08
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 3.3 LOW — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:L/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-264
Description
IBM Sterling Connect:Direct for Unix 4.1.0 before 4.1.0.4 iFix073 and 4.2.0 before 4.2.0.4 iFix003 uses default file permissions of 0664, which allows local users to obtain sensitive information via standard filesystem operations.
Affected configurations
• ibm sterling connect\ direct
Related
Weakness · not in database (1)
References
- http://www-01.ibm.com/support/docview.wss?uid=swg1IT14769 Patch, Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21988278 Mitigation, Patch, Vendor Advisory
- http://www.securityfocus.com/bid/92336 Third Party Advisory, VDB Entry
- http://www-01.ibm.com/support/docview.wss?uid=swg1IT14769 Patch, Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21988278 Mitigation, Patch, Vendor Advisory
- http://www.securityfocus.com/bid/92336 Third Party Advisory, VDB Entry