CVEvulnerability

CVE-2018-1386

7.8 HIGH Published 2018-03-14 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2018-03-14
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 3.0 ([email protected])
7.4 HIGH — CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
6.9 MEDIUM — AV:L/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
CWE-732

Description

IBM Tivoli Workload Automation for AIX (IBM Workload Scheduler 8.6, 9.1, 9.2, 9.3, and 9.4) contains directories with improper permissions that could allow a local user to with special access to gain root privileges. IBM X-Force ID: 138208.

Affected configurations

• ibm tivoli workload scheduler 8.6 • ibm tivoli workload scheduler 9.1 • ibm tivoli workload scheduler 9.2 • ibm tivoli workload scheduler 9.3 • ibm tivoli workload scheduler 9.4

Related

Weakness · CWE (1)

  • CWE-732 Incorrect Permission Assignment for Critical Resource weakness

References